diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index a7a05cbbc290..ba1dabc81f1c 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.7.1 + +No user-facing changes. + ## 0.7.0 ### Breaking Changes diff --git a/actions/ql/lib/change-notes/released/0.7.1.md b/actions/ql/lib/change-notes/released/0.7.1.md new file mode 100644 index 000000000000..86973d360428 --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.7.1.md @@ -0,0 +1,3 @@ +## 0.7.1 + +No user-facing changes. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index c761f3e7ab44..e007a9aec3e9 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.7.0 +lastReleaseVersion: 0.7.1 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index 00dfb439af70..3e209144f22c 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.7.1-dev +version: 0.7.2-dev library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index d99ca36e7cc6..359d69214641 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.6.39 + +No user-facing changes. + ## 0.6.38 No user-facing changes. diff --git a/actions/ql/src/change-notes/released/0.6.39.md b/actions/ql/src/change-notes/released/0.6.39.md new file mode 100644 index 000000000000..8b72c9e25164 --- /dev/null +++ b/actions/ql/src/change-notes/released/0.6.39.md @@ -0,0 +1,3 @@ +## 0.6.39 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index 5953c00e4a81..8bb51432d803 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.38 +lastReleaseVersion: 0.6.39 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index b1a092734a13..fd909c917439 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.39-dev +version: 0.6.40-dev library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index 80c4989f1e93..512af6062bf3 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,10 @@ +## 12.4.0 + +### New Features + +* Added support for the `__builtin_lt_synthesizes_from_spaceship`, `__builtin_gt_synthesizes_from_spaceship`, `__builtin_le_synthesizes_from_spaceship`, `__builtin_ge_synthesizes_from_spaceship`, `__builtin_is_implicit_lifetime`, `__builtin_is_structural`, and `__builtin_is_virtual_base_of` builtin operations. +* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type. + ## 12.3.0 ### New Features diff --git a/cpp/ql/lib/change-notes/2026-10-15-bitwidth.md b/cpp/ql/lib/change-notes/2026-10-15-bitwidth.md deleted file mode 100644 index 7d1b3b4248c4..000000000000 --- a/cpp/ql/lib/change-notes/2026-10-15-bitwidth.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type. diff --git a/cpp/ql/lib/change-notes/2026-10-16-builtins.md b/cpp/ql/lib/change-notes/released/12.4.0.md similarity index 70% rename from cpp/ql/lib/change-notes/2026-10-16-builtins.md rename to cpp/ql/lib/change-notes/released/12.4.0.md index 2434e465cd5a..6467dc2b9381 100644 --- a/cpp/ql/lib/change-notes/2026-10-16-builtins.md +++ b/cpp/ql/lib/change-notes/released/12.4.0.md @@ -1,4 +1,6 @@ ---- -category: feature ---- +## 12.4.0 + +### New Features + * Added support for the `__builtin_lt_synthesizes_from_spaceship`, `__builtin_gt_synthesizes_from_spaceship`, `__builtin_le_synthesizes_from_spaceship`, `__builtin_ge_synthesizes_from_spaceship`, `__builtin_is_implicit_lifetime`, `__builtin_is_structural`, and `__builtin_is_virtual_base_of` builtin operations. +* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index 2f4c5dac2ed2..6514beb79b03 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 12.3.0 +lastReleaseVersion: 12.4.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index a32cba70596b..9d3f8acde278 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 12.3.1-dev +version: 12.4.1-dev groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index cfc196ba3c8b..59508a4a2044 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,14 @@ +## 1.10.0 + +### Query Metadata Changes + +* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code. + +### Minor Analysis Improvements + +* The `cpp/suspicious-pointer-scaling` query no longer reports false positives for intentional pointer arithmetic from `std::byte*` buffers. +* The `cpp/unused-local-variable` and `cpp/unused-static-variable` queries no longer report variables marked with the C++17 `[[maybe_unused]]` attribute. + ## 1.9.2 ### Minor Analysis Improvements diff --git a/cpp/ql/src/change-notes/2026-10-12-cpp-code-quality-suite.md b/cpp/ql/src/change-notes/2026-10-12-cpp-code-quality-suite.md deleted file mode 100644 index da96d01b3bad..000000000000 --- a/cpp/ql/src/change-notes/2026-10-12-cpp-code-quality-suite.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: queryMetadata ---- -* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code. diff --git a/cpp/ql/src/change-notes/2026-10-29-suspicious-pointer-scaling-byte.md b/cpp/ql/src/change-notes/2026-10-29-suspicious-pointer-scaling-byte.md deleted file mode 100644 index a8c4c305b094..000000000000 --- a/cpp/ql/src/change-notes/2026-10-29-suspicious-pointer-scaling-byte.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `cpp/suspicious-pointer-scaling` query no longer reports false positives for intentional pointer arithmetic from `std::byte*` buffers. diff --git a/cpp/ql/src/change-notes/2026-10-29-unused-maybe-unused.md b/cpp/ql/src/change-notes/2026-10-29-unused-maybe-unused.md deleted file mode 100644 index a898159583fb..000000000000 --- a/cpp/ql/src/change-notes/2026-10-29-unused-maybe-unused.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -The `cpp/unused-local-variable` and `cpp/unused-static-variable` queries no longer report variables marked with the C++17 `[[maybe_unused]]` attribute. diff --git a/cpp/ql/src/change-notes/released/1.10.0.md b/cpp/ql/src/change-notes/released/1.10.0.md new file mode 100644 index 000000000000..17b337e8419f --- /dev/null +++ b/cpp/ql/src/change-notes/released/1.10.0.md @@ -0,0 +1,10 @@ +## 1.10.0 + +### Query Metadata Changes + +* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code. + +### Minor Analysis Improvements + +* The `cpp/suspicious-pointer-scaling` query no longer reports false positives for intentional pointer arithmetic from `std::byte*` buffers. +* The `cpp/unused-local-variable` and `cpp/unused-static-variable` queries no longer report variables marked with the C++17 `[[maybe_unused]]` attribute. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 842136056d89..753e9ac28449 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.9.2 +lastReleaseVersion: 1.10.0 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index e61594b23415..0bc1233931a4 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.9.3-dev +version: 1.10.1-dev groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index 0ece244ec308..9c6f1d52bc65 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.78 + +No user-facing changes. + ## 1.7.77 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.78.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.78.md new file mode 100644 index 000000000000..bd8bfdf80d16 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.78.md @@ -0,0 +1,3 @@ +## 1.7.78 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 6ebdd95a6ece..5143d6ab6b9d 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.77 +lastReleaseVersion: 1.7.78 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index f815df321b13..dd073904894b 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.78-dev +version: 1.7.79-dev groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index 0ece244ec308..9c6f1d52bc65 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.78 + +No user-facing changes. + ## 1.7.77 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.78.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.78.md new file mode 100644 index 000000000000..bd8bfdf80d16 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.78.md @@ -0,0 +1,3 @@ +## 1.7.78 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 6ebdd95a6ece..5143d6ab6b9d 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.77 +lastReleaseVersion: 1.7.78 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index b708787ad92d..a1cccac9147f 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.78-dev +version: 1.7.79-dev groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 0ac8860a7ed0..3084acb9f3d2 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 7.4.2 + +### Minor Analysis Improvements + +* Rolled back the change that set proxy and certificate environment variables for the subprocess that invokes the NuGet CLI because the environment variables were only partially respected by the target process in some cases. + ## 7.4.1 ### Minor Analysis Improvements diff --git a/csharp/ql/lib/change-notes/2026-10-26-nugetcli-proxy-config-rollback.md b/csharp/ql/lib/change-notes/released/7.4.2.md similarity index 83% rename from csharp/ql/lib/change-notes/2026-10-26-nugetcli-proxy-config-rollback.md rename to csharp/ql/lib/change-notes/released/7.4.2.md index bda5d495d70a..df268fb06818 100644 --- a/csharp/ql/lib/change-notes/2026-10-26-nugetcli-proxy-config-rollback.md +++ b/csharp/ql/lib/change-notes/released/7.4.2.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 7.4.2 + +### Minor Analysis Improvements + * Rolled back the change that set proxy and certificate environment variables for the subprocess that invokes the NuGet CLI because the environment variables were only partially respected by the target process in some cases. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index da28a63a9be9..b39446e5526d 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.4.1 +lastReleaseVersion: 7.4.2 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index af1abccc9f10..afcf5b37a610 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 7.4.2-dev +version: 7.4.3-dev groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index af251858f599..ca515fcf96cd 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.11.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.10.2 ### Minor Analysis Improvements diff --git a/csharp/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/csharp/ql/src/change-notes/released/1.11.0.md similarity index 84% rename from csharp/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to csharp/ql/src/change-notes/released/1.11.0.md index 6c58615a53a7..537a1c73eb2c 100644 --- a/csharp/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/csharp/ql/src/change-notes/released/1.11.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.11.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 7303d5a67610..276088d81dc8 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.10.2 +lastReleaseVersion: 1.11.0 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 8595bac54104..ed46836464d2 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.10.3-dev +version: 1.11.1-dev groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index 022e978cff17..00beeb1106c7 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.61.md b/go/ql/consistency-queries/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index 30f63700b9e3..0b47a03629bd 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.61-dev +version: 1.0.62-dev groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index 50cff8505a60..55f840973eaf 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,17 @@ +## 8.1.0 + +### Deprecated APIs + +* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead. + +### New Features + +* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates. + +### Bug Fixes + +* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`. + ## 8.0.1 No user-facing changes. diff --git a/go/ql/lib/change-notes/2026-08-17-deprecate-condition-guard-node.md b/go/ql/lib/change-notes/2026-08-17-deprecate-condition-guard-node.md deleted file mode 100644 index 0d67194c2c0f..000000000000 --- a/go/ql/lib/change-notes/2026-08-17-deprecate-condition-guard-node.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: deprecated ---- -* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead. \ No newline at end of file diff --git a/go/ql/lib/change-notes/2026-08-17-shared-guards.md b/go/ql/lib/change-notes/2026-08-17-shared-guards.md deleted file mode 100644 index 924c2cec272e..000000000000 --- a/go/ql/lib/change-notes/2026-08-17-shared-guards.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates. diff --git a/go/ql/lib/change-notes/2026-10-26-registry-proxy-certificate.md b/go/ql/lib/change-notes/2026-10-26-registry-proxy-certificate.md deleted file mode 100644 index 02f2a422c42c..000000000000 --- a/go/ql/lib/change-notes/2026-10-26-registry-proxy-certificate.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`. diff --git a/go/ql/lib/change-notes/released/8.1.0.md b/go/ql/lib/change-notes/released/8.1.0.md new file mode 100644 index 000000000000..29a390f48645 --- /dev/null +++ b/go/ql/lib/change-notes/released/8.1.0.md @@ -0,0 +1,13 @@ +## 8.1.0 + +### Deprecated APIs + +* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead. + +### New Features + +* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates. + +### Bug Fixes + +* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 145ae8f5b473..59984961848d 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 8.0.1 +lastReleaseVersion: 8.1.0 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 3afaaad22d21..728d6fbe2263 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 8.0.2-dev +version: 8.1.1-dev groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index 9714c3bcc62c..ea8e2bb9b2c6 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.14 + +No user-facing changes. + ## 1.6.13 No user-facing changes. diff --git a/go/ql/src/change-notes/released/1.6.14.md b/go/ql/src/change-notes/released/1.6.14.md new file mode 100644 index 000000000000..161031a3d6e4 --- /dev/null +++ b/go/ql/src/change-notes/released/1.6.14.md @@ -0,0 +1,3 @@ +## 1.6.14 + +No user-facing changes. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index c34c18075123..4e7f93f87f23 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.13 +lastReleaseVersion: 1.6.14 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index dca07e4d2962..95b820e2caa4 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.6.14-dev +version: 1.6.15-dev groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index a603b244a9a7..d98b8ad60b6d 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,10 @@ +## 9.3.4 + +### Minor Analysis Improvements + +* The `java/log-injection` query now recognizes additional sanitizers and sanitizer guards from the JDK, Apache Commons Lang and Text, Guava, OWASP Java Encoder, and Spring Framework. +* Queries that use path-injection sanitizers now recognize additional substring guards and string replacement and removal operations from Apache Commons Lang and Guava. + ## 9.3.3 ### Minor Analysis Improvements diff --git a/java/ql/lib/change-notes/2026-10-15-log-injection-sanitizers.md b/java/ql/lib/change-notes/released/9.3.4.md similarity index 89% rename from java/ql/lib/change-notes/2026-10-15-log-injection-sanitizers.md rename to java/ql/lib/change-notes/released/9.3.4.md index 15361a72247d..53015bb0afe1 100644 --- a/java/ql/lib/change-notes/2026-10-15-log-injection-sanitizers.md +++ b/java/ql/lib/change-notes/released/9.3.4.md @@ -1,5 +1,6 @@ ---- -category: minorAnalysis ---- +## 9.3.4 + +### Minor Analysis Improvements + * The `java/log-injection` query now recognizes additional sanitizers and sanitizer guards from the JDK, Apache Commons Lang and Text, Guava, OWASP Java Encoder, and Spring Framework. * Queries that use path-injection sanitizers now recognize additional substring guards and string replacement and removal operations from Apache Commons Lang and Guava. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 0f0b41ca1bdc..9b88f8a94867 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 9.3.3 +lastReleaseVersion: 9.3.4 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 2970bb18d14d..eff99bb22a6e 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 9.3.4-dev +version: 9.3.5-dev groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index 5bc9f1648046..b2ccac02ad00 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.12.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.11.13 No user-facing changes. diff --git a/java/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/java/ql/src/change-notes/released/1.12.0.md similarity index 85% rename from java/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to java/ql/src/change-notes/released/1.12.0.md index 4abdb92b9d7d..81458b24b958 100644 --- a/java/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/java/ql/src/change-notes/released/1.12.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.12.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index 539b3977389e..59868ba778d8 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.11.13 +lastReleaseVersion: 1.12.0 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 2988f55e18bb..e87965c929d8 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.11.14-dev +version: 1.12.1-dev groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index 2d91489d2c7e..b36191fe8c22 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 3.0.0 + +### Breaking Changes + +* The `SEMMLE_TYPESCRIPT_HOME` environment variable is no longer supported. The JavaScript/TypeScript extractor now ignores the environment variable and always uses its bundled TypeScript compiler. + +### Minor Analysis Improvements + +* Added taint steps for `String.prototype.trimStart`, `trimEnd`, and `normalize`. +* Fixed the flow summary for `Array.prototype.flatMap`. The `thisArg` argument now flows to the callback's `this` instead of its index parameter. + ## 2.10.4 No user-facing changes. diff --git a/javascript/ql/lib/change-notes/2026-10-19-array-flatmap-thisarg.md b/javascript/ql/lib/change-notes/2026-10-19-array-flatmap-thisarg.md deleted file mode 100644 index 43552a901cc2..000000000000 --- a/javascript/ql/lib/change-notes/2026-10-19-array-flatmap-thisarg.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Fixed the flow summary for `Array.prototype.flatMap`. The `thisArg` argument now flows to the callback's `this` instead of its index parameter. diff --git a/javascript/ql/lib/change-notes/2026-10-20-string-trim-normalize.md b/javascript/ql/lib/change-notes/2026-10-20-string-trim-normalize.md deleted file mode 100644 index ccafb5b33836..000000000000 --- a/javascript/ql/lib/change-notes/2026-10-20-string-trim-normalize.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added taint steps for `String.prototype.trimStart`, `trimEnd`, and `normalize`. diff --git a/javascript/ql/lib/change-notes/2026-10-22-remove-typescript-home.md b/javascript/ql/lib/change-notes/2026-10-22-remove-typescript-home.md deleted file mode 100644 index 810b9c60ea12..000000000000 --- a/javascript/ql/lib/change-notes/2026-10-22-remove-typescript-home.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: breaking ---- -* The `SEMMLE_TYPESCRIPT_HOME` environment variable is no longer supported. The JavaScript/TypeScript extractor now ignores the environment variable and always uses its bundled TypeScript compiler. diff --git a/javascript/ql/lib/change-notes/released/3.0.0.md b/javascript/ql/lib/change-notes/released/3.0.0.md new file mode 100644 index 000000000000..07f4ae5ed88f --- /dev/null +++ b/javascript/ql/lib/change-notes/released/3.0.0.md @@ -0,0 +1,10 @@ +## 3.0.0 + +### Breaking Changes + +* The `SEMMLE_TYPESCRIPT_HOME` environment variable is no longer supported. The JavaScript/TypeScript extractor now ignores the environment variable and always uses its bundled TypeScript compiler. + +### Minor Analysis Improvements + +* Added taint steps for `String.prototype.trimStart`, `trimEnd`, and `normalize`. +* Fixed the flow summary for `Array.prototype.flatMap`. The `thisArg` argument now flows to the callback's `this` instead of its index parameter. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index ffc1edf876f3..33d3a2cd1139 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.10.4 +lastReleaseVersion: 3.0.0 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index c53b22e5854a..d42fdd6cb52e 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.10.5-dev +version: 3.0.1-dev groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 825eedb33c2c..d0a66885fac5 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,13 @@ +## 2.5.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `js/redos`, `js/polynomial-redos`, `js/regex-injection`, `js/regex-injection-more-sources`, `js/server-crash` and `js/loop-bound-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + +### Minor Analysis Improvements + +* The `js/invalid-prototype-value` query no longer reports computed `__proto__` properties in object literals. + ## 2.4.8 No user-facing changes. diff --git a/javascript/ql/src/change-notes/2026-10-15-invalid-prototype-computed-property.md b/javascript/ql/src/change-notes/2026-10-15-invalid-prototype-computed-property.md deleted file mode 100644 index 56c16ede5106..000000000000 --- a/javascript/ql/src/change-notes/2026-10-15-invalid-prototype-computed-property.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `js/invalid-prototype-value` query no longer reports computed `__proto__` properties in object literals. diff --git a/javascript/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/javascript/ql/src/change-notes/released/2.5.0.md similarity index 62% rename from javascript/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to javascript/ql/src/change-notes/released/2.5.0.md index f0cd565e6d81..a632bb631969 100644 --- a/javascript/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/javascript/ql/src/change-notes/released/2.5.0.md @@ -1,4 +1,9 @@ ---- -category: queryMetadata ---- +## 2.5.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `js/redos`, `js/polynomial-redos`, `js/regex-injection`, `js/regex-injection-more-sources`, `js/server-crash` and `js/loop-bound-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + +### Minor Analysis Improvements + +* The `js/invalid-prototype-value` query no longer reports computed `__proto__` properties in object literals. diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index 33a159ab6e0e..a1e889c054a7 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.4.8 +lastReleaseVersion: 2.5.0 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index e69ab685a2cd..d7104940af11 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 2.4.9-dev +version: 2.5.1-dev groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index 8342bb58f455..f6f103a7e8d0 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.61.md b/misc/suite-helpers/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index 80d1ff68a9d1..037ffbb300c5 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.61-dev +version: 1.0.62-dev groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index d8691fc4252d..7c16b1b80260 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 7.2.9 + +No user-facing changes. + ## 7.2.8 ### Minor Analysis Improvements diff --git a/python/ql/lib/change-notes/released/7.2.9.md b/python/ql/lib/change-notes/released/7.2.9.md new file mode 100644 index 000000000000..e308d6bc641d --- /dev/null +++ b/python/ql/lib/change-notes/released/7.2.9.md @@ -0,0 +1,3 @@ +## 7.2.9 + +No user-facing changes. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index 75d5ba5ae773..0329e1931ec4 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.8 +lastReleaseVersion: 7.2.9 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index f665c80eca44..e6e2c515b0b1 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 7.2.9-dev +version: 7.2.10-dev groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index 3273d360f617..16202311b6b2 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.9.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `py/redos`, `py/polynomial-redos` and `py/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.8.13 No user-facing changes. diff --git a/python/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/python/ql/src/change-notes/released/1.9.0.md similarity index 85% rename from python/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to python/ql/src/change-notes/released/1.9.0.md index 295ffb0e705c..b3c4753363eb 100644 --- a/python/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/python/ql/src/change-notes/released/1.9.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.9.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `py/redos`, `py/polynomial-redos` and `py/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index a0c60d1bc7e6..df17dc3a3662 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.13 +lastReleaseVersion: 1.9.0 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index e39c8a993efc..bf57dfd657c0 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.8.14-dev +version: 1.9.1-dev groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index 195e65ec4b2d..8d8dbd9cdad6 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 7.1.1 + +No user-facing changes. + ## 7.1.0 ### New Features diff --git a/ruby/ql/lib/change-notes/released/7.1.1.md b/ruby/ql/lib/change-notes/released/7.1.1.md new file mode 100644 index 000000000000..849fd4da3283 --- /dev/null +++ b/ruby/ql/lib/change-notes/released/7.1.1.md @@ -0,0 +1,3 @@ +## 7.1.1 + +No user-facing changes. diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index dcaaa76112a6..8e970df6cae3 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.1.0 +lastReleaseVersion: 7.1.1 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index f97e0932dcef..fe92d1089f2d 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 7.1.1-dev +version: 7.1.2-dev groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index 9598ffe138a1..061ac1e12f36 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.7.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `rb/redos`, `rb/polynomial-redos` and `rb/regexp-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.6.13 No user-facing changes. diff --git a/ruby/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/ruby/ql/src/change-notes/released/1.7.0.md similarity index 85% rename from ruby/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to ruby/ql/src/change-notes/released/1.7.0.md index f3c5468fb136..6dff47e5172a 100644 --- a/ruby/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/ruby/ql/src/change-notes/released/1.7.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.7.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `rb/redos`, `rb/polynomial-redos` and `rb/regexp-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index c34c18075123..d1184cc67507 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.13 +lastReleaseVersion: 1.7.0 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index 23eff5250514..32e21fbacce8 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.6.14-dev +version: 1.7.1-dev groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index 6cafc9fb900c..2fddae495d8d 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 0.2.25 + +### Minor Analysis Improvements + +* The early return taken by the `?` operator no longer makes the unwrapped value of `x?` flow out of the enclosing function. This fixes false positive results from queries such as `rust/cleartext-logging`, where a sensitive value read with `?` was reported as part of an unrelated return value. +* Added neutral models to inhibit spurious generated sink models for `actix_web::HttpRequest::connection_info` and the methods built on it, such as `full_url` and `url_for`. This fixes some false positive results from queries such as `rust/uncontrolled-allocation-size` and `rust/log-injection`. +* Added neutral models to inhibit spurious generated sink models for `Vec` and `VecDeque` methods such as `insert`, `remove` and `push_back`. This fixes some false positive results from queries such as `rust/cleartext-logging`. + ## 0.2.24 ### Minor Analysis Improvements diff --git a/rust/ql/lib/change-notes/2026-10-22-neutral-models-vec-vecdeque.md b/rust/ql/lib/change-notes/2026-10-22-neutral-models-vec-vecdeque.md deleted file mode 100644 index 53ebd1cc4d3f..000000000000 --- a/rust/ql/lib/change-notes/2026-10-22-neutral-models-vec-vecdeque.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added neutral models to inhibit spurious generated sink models for `Vec` and `VecDeque` methods such as `insert`, `remove` and `push_back`. This fixes some false positive results from queries such as `rust/cleartext-logging`. diff --git a/rust/ql/lib/change-notes/2026-10-25-neutral-models-actix-connection-info.md b/rust/ql/lib/change-notes/2026-10-25-neutral-models-actix-connection-info.md deleted file mode 100644 index bbe8eacf0cc8..000000000000 --- a/rust/ql/lib/change-notes/2026-10-25-neutral-models-actix-connection-info.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added neutral models to inhibit spurious generated sink models for `actix_web::HttpRequest::connection_info` and the methods built on it, such as `full_url` and `url_for`. This fixes some false positive results from queries such as `rust/uncontrolled-allocation-size` and `rust/log-injection`. diff --git a/rust/ql/lib/change-notes/2026-10-27-try-operator-early-return.md b/rust/ql/lib/change-notes/2026-10-27-try-operator-early-return.md deleted file mode 100644 index d80859cc435d..000000000000 --- a/rust/ql/lib/change-notes/2026-10-27-try-operator-early-return.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The early return taken by the `?` operator no longer makes the unwrapped value of `x?` flow out of the enclosing function. This fixes false positive results from queries such as `rust/cleartext-logging`, where a sensitive value read with `?` was reported as part of an unrelated return value. diff --git a/rust/ql/lib/change-notes/released/0.2.25.md b/rust/ql/lib/change-notes/released/0.2.25.md new file mode 100644 index 000000000000..8442f171cf2b --- /dev/null +++ b/rust/ql/lib/change-notes/released/0.2.25.md @@ -0,0 +1,7 @@ +## 0.2.25 + +### Minor Analysis Improvements + +* The early return taken by the `?` operator no longer makes the unwrapped value of `x?` flow out of the enclosing function. This fixes false positive results from queries such as `rust/cleartext-logging`, where a sensitive value read with `?` was reported as part of an unrelated return value. +* Added neutral models to inhibit spurious generated sink models for `actix_web::HttpRequest::connection_info` and the methods built on it, such as `full_url` and `url_for`. This fixes some false positive results from queries such as `rust/uncontrolled-allocation-size` and `rust/log-injection`. +* Added neutral models to inhibit spurious generated sink models for `Vec` and `VecDeque` methods such as `insert`, `remove` and `push_back`. This fixes some false positive results from queries such as `rust/cleartext-logging`. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index e4d3f20b369f..901f478b99b2 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.2.24 +lastReleaseVersion: 0.2.25 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index c96da2d837f9..7d8cfa5680a2 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.2.25-dev +version: 0.2.26-dev groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index 99917aab6973..4488024c245b 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.1.46 + +No user-facing changes. + ## 0.1.45 No user-facing changes. diff --git a/rust/ql/src/change-notes/released/0.1.46.md b/rust/ql/src/change-notes/released/0.1.46.md new file mode 100644 index 000000000000..b77394641b83 --- /dev/null +++ b/rust/ql/src/change-notes/released/0.1.46.md @@ -0,0 +1,3 @@ +## 0.1.46 + +No user-facing changes. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 3dc3f878c936..4058070c89ec 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.45 +lastReleaseVersion: 0.1.46 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index 5eecda5b5427..b47ffadb209e 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.46-dev +version: 0.1.47-dev groups: - rust - queries diff --git a/shared/concepts/CHANGELOG.md b/shared/concepts/CHANGELOG.md index ae5ae1af6662..d2fedcbb7dc0 100644 --- a/shared/concepts/CHANGELOG.md +++ b/shared/concepts/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.35 + +No user-facing changes. + ## 0.0.34 No user-facing changes. diff --git a/shared/concepts/change-notes/released/0.0.35.md b/shared/concepts/change-notes/released/0.0.35.md new file mode 100644 index 000000000000..1ffec5217282 --- /dev/null +++ b/shared/concepts/change-notes/released/0.0.35.md @@ -0,0 +1,3 @@ +## 0.0.35 + +No user-facing changes. diff --git a/shared/concepts/codeql-pack.release.yml b/shared/concepts/codeql-pack.release.yml index 6fb3b6253bb9..143c97892032 100644 --- a/shared/concepts/codeql-pack.release.yml +++ b/shared/concepts/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.34 +lastReleaseVersion: 0.0.35 diff --git a/shared/concepts/qlpack.yml b/shared/concepts/qlpack.yml index b135717ce9e7..facc6f8c0566 100644 --- a/shared/concepts/qlpack.yml +++ b/shared/concepts/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/concepts -version: 0.0.35-dev +version: 0.0.36-dev groups: shared library: true dependencies: diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 9dd8e5ba57f0..7c3cb2396b76 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.45 + +No user-facing changes. + ## 2.0.44 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.45.md b/shared/controlflow/change-notes/released/2.0.45.md new file mode 100644 index 000000000000..ec5a10154c4d --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.45.md @@ -0,0 +1,3 @@ +## 2.0.45 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index 2032d0ef8b3f..c36828b9af04 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.44 +lastReleaseVersion: 2.0.45 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index d755d7e7f167..46b8479a3155 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.45-dev +version: 2.0.46-dev groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index b86157da7e4e..33e2cdaa8c48 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.1.17 + +No user-facing changes. + ## 2.1.16 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.1.17.md b/shared/dataflow/change-notes/released/2.1.17.md new file mode 100644 index 000000000000..c8c7d684ff00 --- /dev/null +++ b/shared/dataflow/change-notes/released/2.1.17.md @@ -0,0 +1,3 @@ +## 2.1.17 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 95355cd1067e..31e4c041c750 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.1.16 +lastReleaseVersion: 2.1.17 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index cf5533d0b7dd..3f53049acb71 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.1.17-dev +version: 2.1.18-dev groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 361d3336397e..72af4a15007c 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.61.md b/shared/mad/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/mad/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 1d575e07dfee..6c520e798a30 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.61-dev +version: 1.0.62-dev groups: shared library: true dependencies: diff --git a/shared/namebinding/CHANGELOG.md b/shared/namebinding/CHANGELOG.md index a59e560c4155..1857b399fe88 100644 --- a/shared/namebinding/CHANGELOG.md +++ b/shared/namebinding/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.10 + +No user-facing changes. + ## 0.0.9 No user-facing changes. diff --git a/shared/namebinding/change-notes/released/0.0.10.md b/shared/namebinding/change-notes/released/0.0.10.md new file mode 100644 index 000000000000..22391080fd45 --- /dev/null +++ b/shared/namebinding/change-notes/released/0.0.10.md @@ -0,0 +1,3 @@ +## 0.0.10 + +No user-facing changes. diff --git a/shared/namebinding/codeql-pack.release.yml b/shared/namebinding/codeql-pack.release.yml index ecdd64fbab86..b740014e5aed 100644 --- a/shared/namebinding/codeql-pack.release.yml +++ b/shared/namebinding/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.9 +lastReleaseVersion: 0.0.10 diff --git a/shared/namebinding/qlpack.yml b/shared/namebinding/qlpack.yml index 772f9ce8fd6b..57c8949a3844 100644 --- a/shared/namebinding/qlpack.yml +++ b/shared/namebinding/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/namebinding -version: 0.0.10-dev +version: 0.0.11-dev groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index 6ab8c640bc68..5d7fb2536b42 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.39 + +No user-facing changes. + ## 0.0.38 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.39.md b/shared/quantum/change-notes/released/0.0.39.md new file mode 100644 index 000000000000..b492d1378882 --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.39.md @@ -0,0 +1,3 @@ +## 0.0.39 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index 078a0e3aff01..3e5b1e56a574 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.38 +lastReleaseVersion: 0.0.39 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index d89d3e2adf4a..c1c0fd3b27ea 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.39-dev +version: 0.0.40-dev groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index 8852bd7bf4d5..cf739503d497 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.61.md b/shared/rangeanalysis/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index 986d712f2920..bbc89be8c352 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.61-dev +version: 1.0.62-dev groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index 0f5ef4917bfd..9c25243dac7f 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.61.md b/shared/regex/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/regex/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index e0f497432ddf..c44ae6403ecc 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.61-dev +version: 1.0.62-dev groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index ea8ca229b29e..f7b84cd5f1ff 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.37 + +No user-facing changes. + ## 2.0.36 No user-facing changes. diff --git a/shared/ssa/change-notes/released/2.0.37.md b/shared/ssa/change-notes/released/2.0.37.md new file mode 100644 index 000000000000..7d0b67a34af0 --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.37.md @@ -0,0 +1,3 @@ +## 2.0.37 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 7e4aaa0dd676..108259a74002 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.36 +lastReleaseVersion: 2.0.37 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index cbce558a311a..5acf787b4f61 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.37-dev +version: 2.0.38-dev groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index 69f2c436a8c3..285b5d7169f2 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.1.1 + +No user-facing changes. + ## 1.1.0 ### New Features diff --git a/shared/threat-models/change-notes/released/1.1.1.md b/shared/threat-models/change-notes/released/1.1.1.md new file mode 100644 index 000000000000..7fb56d366105 --- /dev/null +++ b/shared/threat-models/change-notes/released/1.1.1.md @@ -0,0 +1,3 @@ +## 1.1.1 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index 2ac15439f561..1a19084be3f7 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.1.0 +lastReleaseVersion: 1.1.1 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index 9b4f276b0633..23ea2cf9c981 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.1.1-dev +version: 1.1.2-dev library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index 24989e35b34a..13b6e8fc68bc 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.61.md b/shared/tutorial/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index 9c2632029adb..5a21ea2df9d5 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.61-dev +version: 1.0.62-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 1ff01003af3e..15249ce6100a 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.61.md b/shared/typeflow/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 44f29956996d..d79277b95bc7 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.61-dev +version: 1.0.62-dev groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index 5baf7ab7928c..1d1608eb3abe 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.42 + +No user-facing changes. + ## 0.0.41 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.42.md b/shared/typeinference/change-notes/released/0.0.42.md new file mode 100644 index 000000000000..02fe456c7ead --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.42.md @@ -0,0 +1,3 @@ +## 0.0.42 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index 60838ce02183..62d36523a656 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.41 +lastReleaseVersion: 0.0.42 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 4d1dd4606f8b..a55e1243d3d8 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.42-dev +version: 0.0.43-dev groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index c1512dc28fe5..fb5e3f88f36d 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.45 + +No user-facing changes. + ## 2.0.44 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.45.md b/shared/typetracking/change-notes/released/2.0.45.md new file mode 100644 index 000000000000..ec5a10154c4d --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.45.md @@ -0,0 +1,3 @@ +## 2.0.45 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index 2032d0ef8b3f..c36828b9af04 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.44 +lastReleaseVersion: 2.0.45 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index 7268c10af605..087ce38451d1 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.45-dev +version: 2.0.46-dev groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index 8f5444c5d611..9ee84a0d73da 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.61.md b/shared/typos/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/typos/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 29b310bba76f..e27e5c427266 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.61-dev +version: 1.0.62-dev groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index 54a333c22075..8ff15c74d311 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.48 + +No user-facing changes. + ## 2.0.47 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.48.md b/shared/util/change-notes/released/2.0.48.md new file mode 100644 index 000000000000..312243738221 --- /dev/null +++ b/shared/util/change-notes/released/2.0.48.md @@ -0,0 +1,3 @@ +## 2.0.48 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index cda58352a1c8..7017f5f3b179 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.47 +lastReleaseVersion: 2.0.48 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index 96f9dfeae53e..8e1207a4eea1 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.48-dev +version: 2.0.49-dev groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index 495034190e7d..cf24e62f084a 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.61.md b/shared/xml/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/xml/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index b942761558aa..b0038ec2ddb1 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.61-dev +version: 1.0.62-dev groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index a1d5995f2927..7018795e1bb7 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.61.md b/shared/yaml/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 66cd40521d11..51f5bcb56685 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.61-dev +version: 1.0.62-dev groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index 264f9f465be8..c62f5da194bc 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 6.8.7 + +No user-facing changes. + ## 6.8.6 No user-facing changes. diff --git a/swift/ql/lib/change-notes/released/6.8.7.md b/swift/ql/lib/change-notes/released/6.8.7.md new file mode 100644 index 000000000000..854acbf27edc --- /dev/null +++ b/swift/ql/lib/change-notes/released/6.8.7.md @@ -0,0 +1,3 @@ +## 6.8.7 + +No user-facing changes. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index d2d656467e1a..dbafe5e5cf77 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.8.6 +lastReleaseVersion: 6.8.7 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index 4e6065a1b8e7..963bd014be13 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 6.8.7-dev +version: 6.8.8-dev groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index eb19d8719f62..ca902a296a23 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.4.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `swift/redos` and `swift/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.3.13 No user-facing changes. diff --git a/swift/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/swift/ql/src/change-notes/released/1.4.0.md similarity index 84% rename from swift/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to swift/ql/src/change-notes/released/1.4.0.md index ca171e24014d..7cb90fb56e6c 100644 --- a/swift/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/swift/ql/src/change-notes/released/1.4.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.4.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `swift/redos` and `swift/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 583d83c793b7..b8b2e97d5086 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.13 +lastReleaseVersion: 1.4.0 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index 4f9b787b8d24..a91973bbeaf1 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.3.14-dev +version: 1.4.1-dev groups: - swift - queries