From 5dfcc34a4bf7ec0c394eea0ea134bf8f538cea2c Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 15 Oct 2026 14:54:09 +0000 Subject: [PATCH] Release preparation for version 2.27.3 --- actions/ql/lib/CHANGELOG.md | 6 ++++++ .../0.7.0.md} | 7 ++++--- actions/ql/lib/codeql-pack.release.yml | 2 +- actions/ql/lib/qlpack.yml | 2 +- actions/ql/src/CHANGELOG.md | 4 ++++ actions/ql/src/change-notes/released/0.6.38.md | 3 +++ actions/ql/src/codeql-pack.release.yml | 2 +- actions/ql/src/qlpack.yml | 2 +- cpp/ql/lib/CHANGELOG.md | 10 ++++++++++ cpp/ql/lib/change-notes/2026-09-09-bmqa-models.md | 4 ---- cpp/ql/lib/change-notes/2026-10-14-bitint.md | 4 ---- cpp/ql/lib/change-notes/released/12.3.0.md | 9 +++++++++ cpp/ql/lib/codeql-pack.release.yml | 2 +- cpp/ql/lib/qlpack.yml | 2 +- cpp/ql/src/CHANGELOG.md | 6 ++++++ .../1.9.2.md} | 7 ++++--- cpp/ql/src/codeql-pack.release.yml | 2 +- cpp/ql/src/qlpack.yml | 2 +- csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md | 4 ++++ .../lib/change-notes/released/1.7.77.md | 3 +++ .../Solorigate/lib/codeql-pack.release.yml | 2 +- csharp/ql/campaigns/Solorigate/lib/qlpack.yml | 2 +- csharp/ql/campaigns/Solorigate/src/CHANGELOG.md | 4 ++++ .../src/change-notes/released/1.7.77.md | 3 +++ .../Solorigate/src/codeql-pack.release.yml | 2 +- csharp/ql/campaigns/Solorigate/src/qlpack.yml | 2 +- csharp/ql/lib/CHANGELOG.md | 8 ++++++++ .../2026-10-02-positional-pattern-flow.md | 4 ---- .../2026-10-05-nugetcli-proxy-config.md | 4 ---- .../2026-10-07-improve-extractor-logging.md | 4 ---- csharp/ql/lib/change-notes/released/7.4.1.md | 7 +++++++ csharp/ql/lib/codeql-pack.release.yml | 2 +- csharp/ql/lib/qlpack.yml | 2 +- csharp/ql/src/CHANGELOG.md | 6 ++++++ .../1.10.2.md} | 7 ++++--- csharp/ql/src/codeql-pack.release.yml | 2 +- csharp/ql/src/qlpack.yml | 2 +- go/ql/consistency-queries/CHANGELOG.md | 4 ++++ .../change-notes/released/1.0.60.md | 3 +++ go/ql/consistency-queries/codeql-pack.release.yml | 2 +- go/ql/consistency-queries/qlpack.yml | 2 +- go/ql/lib/CHANGELOG.md | 4 ++++ go/ql/lib/change-notes/released/8.0.1.md | 3 +++ go/ql/lib/codeql-pack.release.yml | 2 +- go/ql/lib/qlpack.yml | 2 +- go/ql/src/CHANGELOG.md | 4 ++++ go/ql/src/change-notes/released/1.6.13.md | 3 +++ go/ql/src/codeql-pack.release.yml | 2 +- go/ql/src/qlpack.yml | 2 +- java/ql/lib/CHANGELOG.md | 6 ++++++ .../9.3.3.md} | 7 ++++--- java/ql/lib/codeql-pack.release.yml | 2 +- java/ql/lib/qlpack.yml | 2 +- java/ql/src/CHANGELOG.md | 4 ++++ java/ql/src/change-notes/released/1.11.13.md | 3 +++ java/ql/src/codeql-pack.release.yml | 2 +- java/ql/src/qlpack.yml | 2 +- javascript/ql/lib/CHANGELOG.md | 6 +++++- javascript/ql/lib/change-notes/released/2.10.4.md | 3 +++ javascript/ql/lib/codeql-pack.release.yml | 2 +- javascript/ql/lib/qlpack.yml | 2 +- javascript/ql/src/CHANGELOG.md | 4 ++++ javascript/ql/src/change-notes/released/2.4.8.md | 3 +++ javascript/ql/src/codeql-pack.release.yml | 2 +- javascript/ql/src/qlpack.yml | 2 +- misc/suite-helpers/CHANGELOG.md | 4 ++++ .../suite-helpers/change-notes/released/1.0.60.md | 3 +++ misc/suite-helpers/codeql-pack.release.yml | 2 +- misc/suite-helpers/qlpack.yml | 2 +- python/ql/lib/CHANGELOG.md | 15 +++++++++++++++ .../change-notes/2026-09-22-python315-binascii.md | 4 ---- .../change-notes/2026-09-22-python315-builtins.md | 4 ---- .../2026-09-22-python315-extractor.md | 5 ----- .../2026-09-22-python315-http-headers.md | 4 ---- .../2026-09-22-python315-prefixmatch.md | 4 ---- .../2026-09-22-python315-take-bytes.md | 4 ---- .../2026-09-30-python315-graphemes.md | 4 ---- .../2026-09-30-python315-threading-iterators.md | 4 ---- .../2026-10-14-active-threat-model-sources.md | 4 ---- python/ql/lib/change-notes/released/7.2.8.md | 14 ++++++++++++++ python/ql/lib/codeql-pack.release.yml | 2 +- python/ql/lib/qlpack.yml | 2 +- python/ql/src/CHANGELOG.md | 4 ++++ python/ql/src/change-notes/released/1.8.13.md | 3 +++ python/ql/src/codeql-pack.release.yml | 2 +- python/ql/src/qlpack.yml | 2 +- ruby/ql/lib/CHANGELOG.md | 6 ++++++ .../7.1.0.md} | 7 ++++--- ruby/ql/lib/codeql-pack.release.yml | 2 +- ruby/ql/lib/qlpack.yml | 2 +- ruby/ql/src/CHANGELOG.md | 4 ++++ ruby/ql/src/change-notes/released/1.6.13.md | 3 +++ ruby/ql/src/codeql-pack.release.yml | 2 +- ruby/ql/src/qlpack.yml | 2 +- rust/ql/lib/CHANGELOG.md | 6 ++++++ .../0.2.24.md} | 7 ++++--- rust/ql/lib/codeql-pack.release.yml | 2 +- rust/ql/lib/qlpack.yml | 2 +- rust/ql/src/CHANGELOG.md | 4 ++++ rust/ql/src/change-notes/released/0.1.45.md | 3 +++ rust/ql/src/codeql-pack.release.yml | 2 +- rust/ql/src/qlpack.yml | 2 +- shared/concepts/CHANGELOG.md | 4 ++++ shared/concepts/change-notes/released/0.0.34.md | 3 +++ shared/concepts/codeql-pack.release.yml | 2 +- shared/concepts/qlpack.yml | 2 +- shared/controlflow/CHANGELOG.md | 4 ++++ .../controlflow/change-notes/released/2.0.44.md | 3 +++ shared/controlflow/codeql-pack.release.yml | 2 +- shared/controlflow/qlpack.yml | 2 +- shared/dataflow/CHANGELOG.md | 4 ++++ shared/dataflow/change-notes/released/2.1.16.md | 3 +++ shared/dataflow/codeql-pack.release.yml | 2 +- shared/dataflow/qlpack.yml | 2 +- shared/mad/CHANGELOG.md | 4 ++++ shared/mad/change-notes/released/1.0.60.md | 3 +++ shared/mad/codeql-pack.release.yml | 2 +- shared/mad/qlpack.yml | 2 +- shared/namebinding/CHANGELOG.md | 4 ++++ shared/namebinding/change-notes/released/0.0.9.md | 3 +++ shared/namebinding/codeql-pack.release.yml | 2 +- shared/namebinding/qlpack.yml | 2 +- shared/quantum/CHANGELOG.md | 4 ++++ shared/quantum/change-notes/released/0.0.38.md | 3 +++ shared/quantum/codeql-pack.release.yml | 2 +- shared/quantum/qlpack.yml | 2 +- shared/rangeanalysis/CHANGELOG.md | 4 ++++ .../rangeanalysis/change-notes/released/1.0.60.md | 3 +++ shared/rangeanalysis/codeql-pack.release.yml | 2 +- shared/rangeanalysis/qlpack.yml | 2 +- shared/regex/CHANGELOG.md | 4 ++++ shared/regex/change-notes/released/1.0.60.md | 3 +++ shared/regex/codeql-pack.release.yml | 2 +- shared/regex/qlpack.yml | 2 +- shared/ssa/CHANGELOG.md | 4 ++++ shared/ssa/change-notes/released/2.0.36.md | 3 +++ shared/ssa/codeql-pack.release.yml | 2 +- shared/ssa/qlpack.yml | 2 +- shared/threat-models/CHANGELOG.md | 6 ++++++ .../1.1.0.md} | 7 ++++--- shared/threat-models/codeql-pack.release.yml | 2 +- shared/threat-models/qlpack.yml | 2 +- shared/tutorial/CHANGELOG.md | 4 ++++ shared/tutorial/change-notes/released/1.0.60.md | 3 +++ shared/tutorial/codeql-pack.release.yml | 2 +- shared/tutorial/qlpack.yml | 2 +- shared/typeflow/CHANGELOG.md | 4 ++++ shared/typeflow/change-notes/released/1.0.60.md | 3 +++ shared/typeflow/codeql-pack.release.yml | 2 +- shared/typeflow/qlpack.yml | 2 +- shared/typeinference/CHANGELOG.md | 4 ++++ .../typeinference/change-notes/released/0.0.41.md | 3 +++ shared/typeinference/codeql-pack.release.yml | 2 +- shared/typeinference/qlpack.yml | 2 +- shared/typetracking/CHANGELOG.md | 4 ++++ .../typetracking/change-notes/released/2.0.44.md | 3 +++ shared/typetracking/codeql-pack.release.yml | 2 +- shared/typetracking/qlpack.yml | 2 +- shared/typos/CHANGELOG.md | 4 ++++ shared/typos/change-notes/released/1.0.60.md | 3 +++ shared/typos/codeql-pack.release.yml | 2 +- shared/typos/qlpack.yml | 2 +- shared/util/CHANGELOG.md | 4 ++++ shared/util/change-notes/released/2.0.47.md | 3 +++ shared/util/codeql-pack.release.yml | 2 +- shared/util/qlpack.yml | 2 +- shared/xml/CHANGELOG.md | 4 ++++ shared/xml/change-notes/released/1.0.60.md | 3 +++ shared/xml/codeql-pack.release.yml | 2 +- shared/xml/qlpack.yml | 2 +- shared/yaml/CHANGELOG.md | 4 ++++ shared/yaml/change-notes/released/1.0.60.md | 3 +++ shared/yaml/codeql-pack.release.yml | 2 +- shared/yaml/qlpack.yml | 2 +- swift/ql/lib/CHANGELOG.md | 4 ++++ swift/ql/lib/change-notes/released/6.8.6.md | 3 +++ swift/ql/lib/codeql-pack.release.yml | 2 +- swift/ql/lib/qlpack.yml | 2 +- swift/ql/src/CHANGELOG.md | 4 ++++ swift/ql/src/change-notes/released/1.3.13.md | 3 +++ swift/ql/src/codeql-pack.release.yml | 2 +- swift/ql/src/qlpack.yml | 2 +- 182 files changed, 442 insertions(+), 163 deletions(-) rename actions/ql/lib/change-notes/{2026-09-29-shared-cfg.md => released/0.7.0.md} (95%) create mode 100644 actions/ql/src/change-notes/released/0.6.38.md delete mode 100644 cpp/ql/lib/change-notes/2026-09-09-bmqa-models.md delete mode 100644 cpp/ql/lib/change-notes/2026-10-14-bitint.md create mode 100644 cpp/ql/lib/change-notes/released/12.3.0.md rename cpp/ql/src/change-notes/{2026-10-06-resource-release-aliases.md => released/1.9.2.md} (77%) create mode 100644 csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.77.md create mode 100644 csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.77.md delete mode 100644 csharp/ql/lib/change-notes/2026-10-02-positional-pattern-flow.md delete mode 100644 csharp/ql/lib/change-notes/2026-10-05-nugetcli-proxy-config.md delete mode 100644 csharp/ql/lib/change-notes/2026-10-07-improve-extractor-logging.md create mode 100644 csharp/ql/lib/change-notes/released/7.4.1.md rename csharp/ql/src/change-notes/{2026-09-30-simplify-bool-expr.md => released/1.10.2.md} (74%) create mode 100644 go/ql/consistency-queries/change-notes/released/1.0.60.md create mode 100644 go/ql/lib/change-notes/released/8.0.1.md create mode 100644 go/ql/src/change-notes/released/1.6.13.md rename java/ql/lib/change-notes/{2026-09-15-uri-host-comparisons.md => released/9.3.3.md} (85%) create mode 100644 java/ql/src/change-notes/released/1.11.13.md create mode 100644 javascript/ql/lib/change-notes/released/2.10.4.md create mode 100644 javascript/ql/src/change-notes/released/2.4.8.md create mode 100644 misc/suite-helpers/change-notes/released/1.0.60.md delete mode 100644 python/ql/lib/change-notes/2026-09-22-python315-binascii.md delete mode 100644 python/ql/lib/change-notes/2026-09-22-python315-builtins.md delete mode 100644 python/ql/lib/change-notes/2026-09-22-python315-extractor.md delete mode 100644 python/ql/lib/change-notes/2026-09-22-python315-http-headers.md delete mode 100644 python/ql/lib/change-notes/2026-09-22-python315-prefixmatch.md delete mode 100644 python/ql/lib/change-notes/2026-09-22-python315-take-bytes.md delete mode 100644 python/ql/lib/change-notes/2026-09-30-python315-graphemes.md delete mode 100644 python/ql/lib/change-notes/2026-09-30-python315-threading-iterators.md delete mode 100644 python/ql/lib/change-notes/2026-10-14-active-threat-model-sources.md create mode 100644 python/ql/lib/change-notes/released/7.2.8.md create mode 100644 python/ql/src/change-notes/released/1.8.13.md rename ruby/ql/lib/change-notes/{2026-09-15-grape-request-sources.md => released/7.1.0.md} (87%) create mode 100644 ruby/ql/src/change-notes/released/1.6.13.md rename rust/ql/lib/change-notes/{2026-10-07-rust-analyzer-0.0.357.md => released/0.2.24.md} (80%) create mode 100644 rust/ql/src/change-notes/released/0.1.45.md create mode 100644 shared/concepts/change-notes/released/0.0.34.md create mode 100644 shared/controlflow/change-notes/released/2.0.44.md create mode 100644 shared/dataflow/change-notes/released/2.1.16.md create mode 100644 shared/mad/change-notes/released/1.0.60.md create mode 100644 shared/namebinding/change-notes/released/0.0.9.md create mode 100644 shared/quantum/change-notes/released/0.0.38.md create mode 100644 shared/rangeanalysis/change-notes/released/1.0.60.md create mode 100644 shared/regex/change-notes/released/1.0.60.md create mode 100644 shared/ssa/change-notes/released/2.0.36.md rename shared/threat-models/change-notes/{2026-10-12-ai-threat-model.md => released/1.1.0.md} (78%) create mode 100644 shared/tutorial/change-notes/released/1.0.60.md create mode 100644 shared/typeflow/change-notes/released/1.0.60.md create mode 100644 shared/typeinference/change-notes/released/0.0.41.md create mode 100644 shared/typetracking/change-notes/released/2.0.44.md create mode 100644 shared/typos/change-notes/released/1.0.60.md create mode 100644 shared/util/change-notes/released/2.0.47.md create mode 100644 shared/xml/change-notes/released/1.0.60.md create mode 100644 shared/yaml/change-notes/released/1.0.60.md create mode 100644 swift/ql/lib/change-notes/released/6.8.6.md create mode 100644 swift/ql/src/change-notes/released/1.3.13.md diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index 5853544de061..a7a05cbbc290 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.7.0 + +### Breaking Changes + +* The GitHub Actions control flow graph (CFG) now uses the shared CFG library. The CFG includes explicit before and after nodes and uses the shared entry and exit node representations. Existing code that relies on specific CFG nodes, edges, textual representations, or basic block boundaries may need to be updated. The legacy `Completion`, `NormalCompletion`, `SimpleCompletion`, `BooleanCompletion`, and `ReturnCompletion` classes have been removed because completions are no longer part of the Actions CFG API. Code that inspected completions should inspect CFG edge labels such as `DirectSuccessor`, `BooleanSuccessor`, and `ReturnSuccessor` instead. + ## 0.6.3 ### Minor Analysis Improvements diff --git a/actions/ql/lib/change-notes/2026-09-29-shared-cfg.md b/actions/ql/lib/change-notes/released/0.7.0.md similarity index 95% rename from actions/ql/lib/change-notes/2026-09-29-shared-cfg.md rename to actions/ql/lib/change-notes/released/0.7.0.md index dfab6367a8ce..184995edd711 100644 --- a/actions/ql/lib/change-notes/2026-09-29-shared-cfg.md +++ b/actions/ql/lib/change-notes/released/0.7.0.md @@ -1,4 +1,5 @@ ---- -category: breaking ---- +## 0.7.0 + +### Breaking Changes + * The GitHub Actions control flow graph (CFG) now uses the shared CFG library. The CFG includes explicit before and after nodes and uses the shared entry and exit node representations. Existing code that relies on specific CFG nodes, edges, textual representations, or basic block boundaries may need to be updated. The legacy `Completion`, `NormalCompletion`, `SimpleCompletion`, `BooleanCompletion`, and `ReturnCompletion` classes have been removed because completions are no longer part of the Actions CFG API. Code that inspected completions should inspect CFG edge labels such as `DirectSuccessor`, `BooleanSuccessor`, and `ReturnSuccessor` instead. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index b7dafe32c5d8..c761f3e7ab44 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.3 +lastReleaseVersion: 0.7.0 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index d52269d027ae..34de9308ea72 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.6.4-dev +version: 0.7.0 library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index 98529a5ae62a..d99ca36e7cc6 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.6.38 + +No user-facing changes. + ## 0.6.37 No user-facing changes. diff --git a/actions/ql/src/change-notes/released/0.6.38.md b/actions/ql/src/change-notes/released/0.6.38.md new file mode 100644 index 000000000000..2e9de7e7bd69 --- /dev/null +++ b/actions/ql/src/change-notes/released/0.6.38.md @@ -0,0 +1,3 @@ +## 0.6.38 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index 878f601f7f91..5953c00e4a81 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.37 +lastReleaseVersion: 0.6.38 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index 54c59a31b62c..fc604c700879 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.38-dev +version: 0.6.38 library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index 63aed73b7cfa..80c4989f1e93 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,13 @@ +## 12.3.0 + +### New Features + +* Added support for C23 bit-precise integers (`_BitInt(N)`). + +### Minor Analysis Improvements + +* Added flow summaries for the BlazingMQ `BloombergLP::bmqa::Message` and `MessageProperties` classes and their iterators. + ## 12.2.0 ### New Features diff --git a/cpp/ql/lib/change-notes/2026-09-09-bmqa-models.md b/cpp/ql/lib/change-notes/2026-09-09-bmqa-models.md deleted file mode 100644 index e00c3ca3532b..000000000000 --- a/cpp/ql/lib/change-notes/2026-09-09-bmqa-models.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added flow summaries for the BlazingMQ `BloombergLP::bmqa::Message` and `MessageProperties` classes and their iterators. diff --git a/cpp/ql/lib/change-notes/2026-10-14-bitint.md b/cpp/ql/lib/change-notes/2026-10-14-bitint.md deleted file mode 100644 index 8e185b0dbdc8..000000000000 --- a/cpp/ql/lib/change-notes/2026-10-14-bitint.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added support for C23 bit-precise integers (`_BitInt(N)`). diff --git a/cpp/ql/lib/change-notes/released/12.3.0.md b/cpp/ql/lib/change-notes/released/12.3.0.md new file mode 100644 index 000000000000..d2527bb761f2 --- /dev/null +++ b/cpp/ql/lib/change-notes/released/12.3.0.md @@ -0,0 +1,9 @@ +## 12.3.0 + +### New Features + +* Added support for C23 bit-precise integers (`_BitInt(N)`). + +### Minor Analysis Improvements + +* Added flow summaries for the BlazingMQ `BloombergLP::bmqa::Message` and `MessageProperties` classes and their iterators. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index f3b887bbbecf..2f4c5dac2ed2 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 12.2.0 +lastReleaseVersion: 12.3.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index cb5321832c5f..9178c9b9d67f 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 12.2.1-dev +version: 12.3.0 groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index 434c21b4b79b..cfc196ba3c8b 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.9.2 + +### Minor Analysis Improvements + +* The `cpp/resource-not-released-in-destructor` query now recognizes resources released through local aliases, reducing false-positive results. + ## 1.9.1 No user-facing changes. diff --git a/cpp/ql/src/change-notes/2026-10-06-resource-release-aliases.md b/cpp/ql/src/change-notes/released/1.9.2.md similarity index 77% rename from cpp/ql/src/change-notes/2026-10-06-resource-release-aliases.md rename to cpp/ql/src/change-notes/released/1.9.2.md index 8ae4a7b258c5..297a6627e0b5 100644 --- a/cpp/ql/src/change-notes/2026-10-06-resource-release-aliases.md +++ b/cpp/ql/src/change-notes/released/1.9.2.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.9.2 + +### Minor Analysis Improvements + * The `cpp/resource-not-released-in-destructor` query now recognizes resources released through local aliases, reducing false-positive results. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 29c886b15136..842136056d89 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.9.1 +lastReleaseVersion: 1.9.2 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index c2a454e7bd38..9c6c1d1447ae 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.9.2-dev +version: 1.9.2 groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index c5a1a1c8e98e..0ece244ec308 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.77 + +No user-facing changes. + ## 1.7.76 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.77.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.77.md new file mode 100644 index 000000000000..14045aed3dd4 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.77.md @@ -0,0 +1,3 @@ +## 1.7.77 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index f838e9800c88..6ebdd95a6ece 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.76 +lastReleaseVersion: 1.7.77 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index 31beb4e05d44..9c3552c89f94 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.77-dev +version: 1.7.77 groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index c5a1a1c8e98e..0ece244ec308 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.77 + +No user-facing changes. + ## 1.7.76 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.77.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.77.md new file mode 100644 index 000000000000..14045aed3dd4 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.77.md @@ -0,0 +1,3 @@ +## 1.7.77 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index f838e9800c88..6ebdd95a6ece 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.76 +lastReleaseVersion: 1.7.77 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index aa1fe86fb235..72b51821fe88 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.77-dev +version: 1.7.77 groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 2dd3489a87ab..0ac8860a7ed0 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 7.4.1 + +### Minor Analysis Improvements + +* Avoid logging warnings when there are no explicit or inherited feeds to check for reachability. +* The subprocess for the NuGet CLI is now provided with the proxy and certificate environment variables needed to access private registries if any are configured. +* Added support for data flow through positional patterns in `is` expressions and `switch` cases. + ## 7.4.0 ### Major Analysis Improvements diff --git a/csharp/ql/lib/change-notes/2026-10-02-positional-pattern-flow.md b/csharp/ql/lib/change-notes/2026-10-02-positional-pattern-flow.md deleted file mode 100644 index 82ab7335aa2f..000000000000 --- a/csharp/ql/lib/change-notes/2026-10-02-positional-pattern-flow.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added support for data flow through positional patterns in `is` expressions and `switch` cases. diff --git a/csharp/ql/lib/change-notes/2026-10-05-nugetcli-proxy-config.md b/csharp/ql/lib/change-notes/2026-10-05-nugetcli-proxy-config.md deleted file mode 100644 index 3f2ed8cddb56..000000000000 --- a/csharp/ql/lib/change-notes/2026-10-05-nugetcli-proxy-config.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The subprocess for the NuGet CLI is now provided with the proxy and certificate environment variables needed to access private registries if any are configured. diff --git a/csharp/ql/lib/change-notes/2026-10-07-improve-extractor-logging.md b/csharp/ql/lib/change-notes/2026-10-07-improve-extractor-logging.md deleted file mode 100644 index fdd121dec0af..000000000000 --- a/csharp/ql/lib/change-notes/2026-10-07-improve-extractor-logging.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Avoid logging warnings when there are no explicit or inherited feeds to check for reachability. diff --git a/csharp/ql/lib/change-notes/released/7.4.1.md b/csharp/ql/lib/change-notes/released/7.4.1.md new file mode 100644 index 000000000000..94e6284215a8 --- /dev/null +++ b/csharp/ql/lib/change-notes/released/7.4.1.md @@ -0,0 +1,7 @@ +## 7.4.1 + +### Minor Analysis Improvements + +* Avoid logging warnings when there are no explicit or inherited feeds to check for reachability. +* The subprocess for the NuGet CLI is now provided with the proxy and certificate environment variables needed to access private registries if any are configured. +* Added support for data flow through positional patterns in `is` expressions and `switch` cases. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index be55351642c4..da28a63a9be9 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.4.0 +lastReleaseVersion: 7.4.1 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index b60c477c43c7..701cf4f1a796 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 7.4.1-dev +version: 7.4.1 groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index 999c777e568c..af251858f599 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.10.2 + +### Minor Analysis Improvements + +* The `cs/simplifiable-boolean-expression` query now produces fewer false-positive results when type information is incomplete. + ## 1.10.1 ### Minor Analysis Improvements diff --git a/csharp/ql/src/change-notes/2026-09-30-simplify-bool-expr.md b/csharp/ql/src/change-notes/released/1.10.2.md similarity index 74% rename from csharp/ql/src/change-notes/2026-09-30-simplify-bool-expr.md rename to csharp/ql/src/change-notes/released/1.10.2.md index ae69a2c8197f..cf530869f0bc 100644 --- a/csharp/ql/src/change-notes/2026-09-30-simplify-bool-expr.md +++ b/csharp/ql/src/change-notes/released/1.10.2.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 1.10.2 + +### Minor Analysis Improvements + * The `cs/simplifiable-boolean-expression` query now produces fewer false-positive results when type information is incomplete. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 74cd7e48d517..7303d5a67610 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.10.1 +lastReleaseVersion: 1.10.2 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index e90820fc82c1..8a84da191462 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.10.2-dev +version: 1.10.2 groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index 361d202adc98..022e978cff17 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.60.md b/go/ql/consistency-queries/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index ac7c3ae124f2..a57f8c2d145b 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.60-dev +version: 1.0.60 groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index 431d96627718..50cff8505a60 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 8.0.1 + +No user-facing changes. + ## 8.0.0 ### Breaking Changes diff --git a/go/ql/lib/change-notes/released/8.0.1.md b/go/ql/lib/change-notes/released/8.0.1.md new file mode 100644 index 000000000000..72c82ffed0b6 --- /dev/null +++ b/go/ql/lib/change-notes/released/8.0.1.md @@ -0,0 +1,3 @@ +## 8.0.1 + +No user-facing changes. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 0f48687270dc..145ae8f5b473 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 8.0.0 +lastReleaseVersion: 8.0.1 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index e17dc1d6651a..09c4c604ebdf 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 8.0.1-dev +version: 8.0.1 groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index 0b89e86f809b..9714c3bcc62c 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.13 + +No user-facing changes. + ## 1.6.12 No user-facing changes. diff --git a/go/ql/src/change-notes/released/1.6.13.md b/go/ql/src/change-notes/released/1.6.13.md new file mode 100644 index 000000000000..f15eb488f526 --- /dev/null +++ b/go/ql/src/change-notes/released/1.6.13.md @@ -0,0 +1,3 @@ +## 1.6.13 + +No user-facing changes. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index fd625fd0696f..c34c18075123 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.12 +lastReleaseVersion: 1.6.13 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index 939dabddb897..79275c87087c 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.6.13-dev +version: 1.6.13 groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index 247ee8428289..a603b244a9a7 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 9.3.3 + +### Minor Analysis Improvements + +* The queries `java/ssrf` and `java/unvalidated-url-redirection` recognize case-insensitive comparisons of `URI.getHost()` with fixed string allowlist entries, as well as equality and case-insensitive comparisons when the host is stored in a local variable. + ## 9.3.2 No user-facing changes. diff --git a/java/ql/lib/change-notes/2026-09-15-uri-host-comparisons.md b/java/ql/lib/change-notes/released/9.3.3.md similarity index 85% rename from java/ql/lib/change-notes/2026-09-15-uri-host-comparisons.md rename to java/ql/lib/change-notes/released/9.3.3.md index 9ad96608e3ef..09dd4ef62936 100644 --- a/java/ql/lib/change-notes/2026-09-15-uri-host-comparisons.md +++ b/java/ql/lib/change-notes/released/9.3.3.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 9.3.3 + +### Minor Analysis Improvements + * The queries `java/ssrf` and `java/unvalidated-url-redirection` recognize case-insensitive comparisons of `URI.getHost()` with fixed string allowlist entries, as well as equality and case-insensitive comparisons when the host is stored in a local variable. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 11ed76013cb0..0f0b41ca1bdc 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 9.3.2 +lastReleaseVersion: 9.3.3 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 0354e42c2de9..e1eb5430ee5a 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 9.3.3-dev +version: 9.3.3 groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index a195227b335e..5bc9f1648046 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.11.13 + +No user-facing changes. + ## 1.11.12 No user-facing changes. diff --git a/java/ql/src/change-notes/released/1.11.13.md b/java/ql/src/change-notes/released/1.11.13.md new file mode 100644 index 000000000000..f2d174ab8dc8 --- /dev/null +++ b/java/ql/src/change-notes/released/1.11.13.md @@ -0,0 +1,3 @@ +## 1.11.13 + +No user-facing changes. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index 61a858a90e4a..539b3977389e 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.11.12 +lastReleaseVersion: 1.11.13 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 158ce659a9db..b06718dbdd5d 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.11.13-dev +version: 1.11.13 groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index 195a516d6d92..2d91489d2c7e 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.10.4 + +No user-facing changes. + ## 2.10.3 ### Minor Analysis Improvements @@ -663,7 +667,7 @@ No user-facing changes. ### New Features -* Improved support for [Restify](http://restify.com/) framework, leading to more results when scanning applications developed with this framework. +* Improved support for [Restify](https://restify.com/) framework, leading to more results when scanning applications developed with this framework. * Added support for the [Spife](https://github.com/npm/spife) framework. ### Minor Analysis Improvements diff --git a/javascript/ql/lib/change-notes/released/2.10.4.md b/javascript/ql/lib/change-notes/released/2.10.4.md new file mode 100644 index 000000000000..755ad628fc97 --- /dev/null +++ b/javascript/ql/lib/change-notes/released/2.10.4.md @@ -0,0 +1,3 @@ +## 2.10.4 + +No user-facing changes. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index 4e3ded6e20a1..ffc1edf876f3 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.10.3 +lastReleaseVersion: 2.10.4 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index e63abafd9f12..8f76c7a393fa 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.10.4-dev +version: 2.10.4 groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 9082b363d7fe..825eedb33c2c 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.4.8 + +No user-facing changes. + ## 2.4.7 No user-facing changes. diff --git a/javascript/ql/src/change-notes/released/2.4.8.md b/javascript/ql/src/change-notes/released/2.4.8.md new file mode 100644 index 000000000000..b26883844325 --- /dev/null +++ b/javascript/ql/src/change-notes/released/2.4.8.md @@ -0,0 +1,3 @@ +## 2.4.8 + +No user-facing changes. diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index 95eedc7bf2b2..33a159ab6e0e 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.4.7 +lastReleaseVersion: 2.4.8 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index 629627205ca3..dd3d317b8223 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 2.4.8-dev +version: 2.4.8 groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index 4c3b0c6bfca9..8342bb58f455 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.60.md b/misc/suite-helpers/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index 7801e859413b..52c76d89213a 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.60-dev +version: 1.0.60 groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index dfbba0cf5415..d8691fc4252d 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,18 @@ +## 7.2.8 + +### Minor Analysis Improvements + +* Updated the `py/xxe`, `py/xml-bomb`, and `py/nosql-injection` queries to respect the configured threat model when selecting untrusted data sources. The default behavior remains unchanged and uses remote flow sources. As a side effect, these queries now correctly include sources modeled using data extensions. +* Added taint-flow modeling for `unicodedata.iter_graphemes`, introduced in Python 3.15. +* Added data-flow modeling for `threading.serialize_iterator` and `threading.concurrent_tee`, introduced in Python 3.15. +* Added modeling for the Base32, Base85, and Ascii85 encoding and decoding functions introduced in Python 3.15's `binascii` module, including taint flow through custom alphabets. +* Added support for the `frozendict` and `sentinel` builtins introduced in Python 3.15, and data-flow modeling for `frozendict` construction. +* The Python extractor now supports unary plus in `match` literal patterns, introduced in Python 3.15. +* The Python extractor now supports Unicode 17 identifiers, introduced in Python 3.15. +* Added modeling for the `extra_response_headers` constructor argument and instance attribute of `http.server.SimpleHTTPRequestHandler`, introduced in Python 3.15. +* Added modeling for Python 3.15's `re.prefixmatch` and `re.Pattern.prefixmatch`, matching the existing support for their `match` counterparts. +* Added taint-flow modeling for `bytearray` construction and Python 3.15's `bytearray.take_bytes` method. + ## 7.2.7 No user-facing changes. diff --git a/python/ql/lib/change-notes/2026-09-22-python315-binascii.md b/python/ql/lib/change-notes/2026-09-22-python315-binascii.md deleted file mode 100644 index c7365204991a..000000000000 --- a/python/ql/lib/change-notes/2026-09-22-python315-binascii.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added modeling for the Base32, Base85, and Ascii85 encoding and decoding functions introduced in Python 3.15's `binascii` module, including taint flow through custom alphabets. \ No newline at end of file diff --git a/python/ql/lib/change-notes/2026-09-22-python315-builtins.md b/python/ql/lib/change-notes/2026-09-22-python315-builtins.md deleted file mode 100644 index 56c4f34be927..000000000000 --- a/python/ql/lib/change-notes/2026-09-22-python315-builtins.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added support for the `frozendict` and `sentinel` builtins introduced in Python 3.15, and data-flow modeling for `frozendict` construction. diff --git a/python/ql/lib/change-notes/2026-09-22-python315-extractor.md b/python/ql/lib/change-notes/2026-09-22-python315-extractor.md deleted file mode 100644 index a71936090f8d..000000000000 --- a/python/ql/lib/change-notes/2026-09-22-python315-extractor.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -category: minorAnalysis ---- -* The Python extractor now supports unary plus in `match` literal patterns, introduced in Python 3.15. -* The Python extractor now supports Unicode 17 identifiers, introduced in Python 3.15. diff --git a/python/ql/lib/change-notes/2026-09-22-python315-http-headers.md b/python/ql/lib/change-notes/2026-09-22-python315-http-headers.md deleted file mode 100644 index 5ea82057e2d2..000000000000 --- a/python/ql/lib/change-notes/2026-09-22-python315-http-headers.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added modeling for the `extra_response_headers` constructor argument and instance attribute of `http.server.SimpleHTTPRequestHandler`, introduced in Python 3.15. \ No newline at end of file diff --git a/python/ql/lib/change-notes/2026-09-22-python315-prefixmatch.md b/python/ql/lib/change-notes/2026-09-22-python315-prefixmatch.md deleted file mode 100644 index 1dc703dc48c6..000000000000 --- a/python/ql/lib/change-notes/2026-09-22-python315-prefixmatch.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added modeling for Python 3.15's `re.prefixmatch` and `re.Pattern.prefixmatch`, matching the existing support for their `match` counterparts. \ No newline at end of file diff --git a/python/ql/lib/change-notes/2026-09-22-python315-take-bytes.md b/python/ql/lib/change-notes/2026-09-22-python315-take-bytes.md deleted file mode 100644 index 62b290795c2e..000000000000 --- a/python/ql/lib/change-notes/2026-09-22-python315-take-bytes.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added taint-flow modeling for `bytearray` construction and Python 3.15's `bytearray.take_bytes` method. \ No newline at end of file diff --git a/python/ql/lib/change-notes/2026-09-30-python315-graphemes.md b/python/ql/lib/change-notes/2026-09-30-python315-graphemes.md deleted file mode 100644 index 3a72d92016ae..000000000000 --- a/python/ql/lib/change-notes/2026-09-30-python315-graphemes.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added taint-flow modeling for `unicodedata.iter_graphemes`, introduced in Python 3.15. \ No newline at end of file diff --git a/python/ql/lib/change-notes/2026-09-30-python315-threading-iterators.md b/python/ql/lib/change-notes/2026-09-30-python315-threading-iterators.md deleted file mode 100644 index 2d1c7759968c..000000000000 --- a/python/ql/lib/change-notes/2026-09-30-python315-threading-iterators.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added data-flow modeling for `threading.serialize_iterator` and `threading.concurrent_tee`, introduced in Python 3.15. \ No newline at end of file diff --git a/python/ql/lib/change-notes/2026-10-14-active-threat-model-sources.md b/python/ql/lib/change-notes/2026-10-14-active-threat-model-sources.md deleted file mode 100644 index d4a0203da244..000000000000 --- a/python/ql/lib/change-notes/2026-10-14-active-threat-model-sources.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Updated the `py/xxe`, `py/xml-bomb`, and `py/nosql-injection` queries to respect the configured threat model when selecting untrusted data sources. The default behavior remains unchanged and uses remote flow sources. As a side effect, these queries now correctly include sources modeled using data extensions. diff --git a/python/ql/lib/change-notes/released/7.2.8.md b/python/ql/lib/change-notes/released/7.2.8.md new file mode 100644 index 000000000000..917769cc39ad --- /dev/null +++ b/python/ql/lib/change-notes/released/7.2.8.md @@ -0,0 +1,14 @@ +## 7.2.8 + +### Minor Analysis Improvements + +* Updated the `py/xxe`, `py/xml-bomb`, and `py/nosql-injection` queries to respect the configured threat model when selecting untrusted data sources. The default behavior remains unchanged and uses remote flow sources. As a side effect, these queries now correctly include sources modeled using data extensions. +* Added taint-flow modeling for `unicodedata.iter_graphemes`, introduced in Python 3.15. +* Added data-flow modeling for `threading.serialize_iterator` and `threading.concurrent_tee`, introduced in Python 3.15. +* Added modeling for the Base32, Base85, and Ascii85 encoding and decoding functions introduced in Python 3.15's `binascii` module, including taint flow through custom alphabets. +* Added support for the `frozendict` and `sentinel` builtins introduced in Python 3.15, and data-flow modeling for `frozendict` construction. +* The Python extractor now supports unary plus in `match` literal patterns, introduced in Python 3.15. +* The Python extractor now supports Unicode 17 identifiers, introduced in Python 3.15. +* Added modeling for the `extra_response_headers` constructor argument and instance attribute of `http.server.SimpleHTTPRequestHandler`, introduced in Python 3.15. +* Added modeling for Python 3.15's `re.prefixmatch` and `re.Pattern.prefixmatch`, matching the existing support for their `match` counterparts. +* Added taint-flow modeling for `bytearray` construction and Python 3.15's `bytearray.take_bytes` method. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index 72e45dc680ce..75d5ba5ae773 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.7 +lastReleaseVersion: 7.2.8 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index 22c6c61b1cce..a098630bd9e3 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 7.2.8-dev +version: 7.2.8 groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index a1fc181671ec..3273d360f617 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.8.13 + +No user-facing changes. + ## 1.8.12 No user-facing changes. diff --git a/python/ql/src/change-notes/released/1.8.13.md b/python/ql/src/change-notes/released/1.8.13.md new file mode 100644 index 000000000000..f6ba4db672bd --- /dev/null +++ b/python/ql/src/change-notes/released/1.8.13.md @@ -0,0 +1,3 @@ +## 1.8.13 + +No user-facing changes. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index 1427843afb6b..a0c60d1bc7e6 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.12 +lastReleaseVersion: 1.8.13 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index dbcafa5a5e6a..136074e7c580 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.8.13-dev +version: 1.8.13 groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index b19bf7557d17..195e65ec4b2d 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 7.1.0 + +### New Features + +* Added modeling for `Grape::API`'s `request` sub-accessors (`body.read`, `body.string`, `params`, `GET`, `POST`, `cookies`, `env`, `query_string`, and `path_info`) as remote flow sources. + ## 7.0.2 No user-facing changes. diff --git a/ruby/ql/lib/change-notes/2026-09-15-grape-request-sources.md b/ruby/ql/lib/change-notes/released/7.1.0.md similarity index 87% rename from ruby/ql/lib/change-notes/2026-09-15-grape-request-sources.md rename to ruby/ql/lib/change-notes/released/7.1.0.md index 6c10c221b3ab..b46563bc0d8b 100644 --- a/ruby/ql/lib/change-notes/2026-09-15-grape-request-sources.md +++ b/ruby/ql/lib/change-notes/released/7.1.0.md @@ -1,4 +1,5 @@ ---- -category: feature ---- +## 7.1.0 + +### New Features + * Added modeling for `Grape::API`'s `request` sub-accessors (`body.read`, `body.string`, `params`, `GET`, `POST`, `cookies`, `env`, `query_string`, and `path_info`) as remote flow sources. diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index 1f4c0c554e9c..dcaaa76112a6 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.0.2 +lastReleaseVersion: 7.1.0 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index c6c84248b054..f4c4b446b8c0 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 7.0.3-dev +version: 7.1.0 groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index 47094d8fc7ca..9598ffe138a1 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.13 + +No user-facing changes. + ## 1.6.12 No user-facing changes. diff --git a/ruby/ql/src/change-notes/released/1.6.13.md b/ruby/ql/src/change-notes/released/1.6.13.md new file mode 100644 index 000000000000..f15eb488f526 --- /dev/null +++ b/ruby/ql/src/change-notes/released/1.6.13.md @@ -0,0 +1,3 @@ +## 1.6.13 + +No user-facing changes. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index fd625fd0696f..c34c18075123 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.12 +lastReleaseVersion: 1.6.13 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index b861e264d6fe..f9e0fa851661 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.6.13-dev +version: 1.6.13 groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index c1d7921dc3c5..6cafc9fb900c 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 0.2.24 + +### Minor Analysis Improvements + +* The Rust extractor has been upgraded to use `rust-analyzer` version 0.0.357. As a result, the AST exposed by the Rust libraries now includes the `CfgPredExpr` and `CfgPredPat` classes. + ## 0.2.23 ### Minor Analysis Improvements diff --git a/rust/ql/lib/change-notes/2026-10-07-rust-analyzer-0.0.357.md b/rust/ql/lib/change-notes/released/0.2.24.md similarity index 80% rename from rust/ql/lib/change-notes/2026-10-07-rust-analyzer-0.0.357.md rename to rust/ql/lib/change-notes/released/0.2.24.md index e7bb9c3ffda1..311b37f0a6e5 100644 --- a/rust/ql/lib/change-notes/2026-10-07-rust-analyzer-0.0.357.md +++ b/rust/ql/lib/change-notes/released/0.2.24.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 0.2.24 + +### Minor Analysis Improvements + * The Rust extractor has been upgraded to use `rust-analyzer` version 0.0.357. As a result, the AST exposed by the Rust libraries now includes the `CfgPredExpr` and `CfgPredPat` classes. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index 6620e67b8eb9..e4d3f20b369f 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.2.23 +lastReleaseVersion: 0.2.24 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index 37660efb650f..64507f1d2b19 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.2.24-dev +version: 0.2.24 groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index 851543caa96a..99917aab6973 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.1.45 + +No user-facing changes. + ## 0.1.44 No user-facing changes. diff --git a/rust/ql/src/change-notes/released/0.1.45.md b/rust/ql/src/change-notes/released/0.1.45.md new file mode 100644 index 000000000000..ed391d81b27d --- /dev/null +++ b/rust/ql/src/change-notes/released/0.1.45.md @@ -0,0 +1,3 @@ +## 0.1.45 + +No user-facing changes. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 31f4c760842c..3dc3f878c936 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.44 +lastReleaseVersion: 0.1.45 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index 4411db163dcc..f1105d9b88c3 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.45-dev +version: 0.1.45 groups: - rust - queries diff --git a/shared/concepts/CHANGELOG.md b/shared/concepts/CHANGELOG.md index a2b8c17abc11..ae5ae1af6662 100644 --- a/shared/concepts/CHANGELOG.md +++ b/shared/concepts/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.34 + +No user-facing changes. + ## 0.0.33 No user-facing changes. diff --git a/shared/concepts/change-notes/released/0.0.34.md b/shared/concepts/change-notes/released/0.0.34.md new file mode 100644 index 000000000000..d58affae3891 --- /dev/null +++ b/shared/concepts/change-notes/released/0.0.34.md @@ -0,0 +1,3 @@ +## 0.0.34 + +No user-facing changes. diff --git a/shared/concepts/codeql-pack.release.yml b/shared/concepts/codeql-pack.release.yml index dff9e7f6ea97..6fb3b6253bb9 100644 --- a/shared/concepts/codeql-pack.release.yml +++ b/shared/concepts/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.33 +lastReleaseVersion: 0.0.34 diff --git a/shared/concepts/qlpack.yml b/shared/concepts/qlpack.yml index ada7c58908c4..45c755772ffd 100644 --- a/shared/concepts/qlpack.yml +++ b/shared/concepts/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/concepts -version: 0.0.34-dev +version: 0.0.34 groups: shared library: true dependencies: diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 764d9d765b65..9dd8e5ba57f0 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.44 + +No user-facing changes. + ## 2.0.43 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.44.md b/shared/controlflow/change-notes/released/2.0.44.md new file mode 100644 index 000000000000..47addacab148 --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.44.md @@ -0,0 +1,3 @@ +## 2.0.44 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index 26126cee2c6b..2032d0ef8b3f 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.43 +lastReleaseVersion: 2.0.44 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index 4df13bb99528..dd0448deaf45 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.44-dev +version: 2.0.44 groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index b766cb67e9bf..b86157da7e4e 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.1.16 + +No user-facing changes. + ## 2.1.15 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.1.16.md b/shared/dataflow/change-notes/released/2.1.16.md new file mode 100644 index 000000000000..7f2c2e7f5eec --- /dev/null +++ b/shared/dataflow/change-notes/released/2.1.16.md @@ -0,0 +1,3 @@ +## 2.1.16 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index b0c338b09516..95355cd1067e 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.1.15 +lastReleaseVersion: 2.1.16 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index f72d8133177d..26c7531ecd48 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.1.16-dev +version: 2.1.16 groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 0f3a590c4428..361d3336397e 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.60.md b/shared/mad/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/shared/mad/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 4df4f5181979..ee119a14295e 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.60-dev +version: 1.0.60 groups: shared library: true dependencies: diff --git a/shared/namebinding/CHANGELOG.md b/shared/namebinding/CHANGELOG.md index fba2a8703562..a59e560c4155 100644 --- a/shared/namebinding/CHANGELOG.md +++ b/shared/namebinding/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.9 + +No user-facing changes. + ## 0.0.8 No user-facing changes. diff --git a/shared/namebinding/change-notes/released/0.0.9.md b/shared/namebinding/change-notes/released/0.0.9.md new file mode 100644 index 000000000000..c9e17c6d6cf2 --- /dev/null +++ b/shared/namebinding/change-notes/released/0.0.9.md @@ -0,0 +1,3 @@ +## 0.0.9 + +No user-facing changes. diff --git a/shared/namebinding/codeql-pack.release.yml b/shared/namebinding/codeql-pack.release.yml index 58fdc6b45deb..ecdd64fbab86 100644 --- a/shared/namebinding/codeql-pack.release.yml +++ b/shared/namebinding/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.8 +lastReleaseVersion: 0.0.9 diff --git a/shared/namebinding/qlpack.yml b/shared/namebinding/qlpack.yml index a64380827ceb..87320aec41a5 100644 --- a/shared/namebinding/qlpack.yml +++ b/shared/namebinding/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/namebinding -version: 0.0.9-dev +version: 0.0.9 groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index e34fb7c21ba1..6ab8c640bc68 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.38 + +No user-facing changes. + ## 0.0.37 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.38.md b/shared/quantum/change-notes/released/0.0.38.md new file mode 100644 index 000000000000..6aef3fb33021 --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.38.md @@ -0,0 +1,3 @@ +## 0.0.38 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index 7982dda40f4c..078a0e3aff01 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.37 +lastReleaseVersion: 0.0.38 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index 66a1a1c6949c..b7550a6b5e65 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.38-dev +version: 0.0.38 groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index 7f5498846f2a..8852bd7bf4d5 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.60.md b/shared/rangeanalysis/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index 0276fd184209..9f1e460102a5 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.60-dev +version: 1.0.60 groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index 34a031703641..0f5ef4917bfd 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.60.md b/shared/regex/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/shared/regex/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index 59489f8d24e4..c7ecc960a971 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.60-dev +version: 1.0.60 groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index 3ea631931164..ea8ca229b29e 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.36 + +No user-facing changes. + ## 2.0.35 No user-facing changes. diff --git a/shared/ssa/change-notes/released/2.0.36.md b/shared/ssa/change-notes/released/2.0.36.md new file mode 100644 index 000000000000..8acdd12366e4 --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.36.md @@ -0,0 +1,3 @@ +## 2.0.36 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 27eb8ef8ecea..7e4aaa0dd676 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.35 +lastReleaseVersion: 2.0.36 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index 2ebcd1ed9373..d8f1b3764c76 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.36-dev +version: 2.0.36 groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index 361d202adc98..69f2c436a8c3 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.1.0 + +### New Features + +* Added the opt-in `ai` threat model for LLM-generated data. No built-in source models are included. + ## 1.0.59 No user-facing changes. diff --git a/shared/threat-models/change-notes/2026-10-12-ai-threat-model.md b/shared/threat-models/change-notes/released/1.1.0.md similarity index 78% rename from shared/threat-models/change-notes/2026-10-12-ai-threat-model.md rename to shared/threat-models/change-notes/released/1.1.0.md index 3aedb64891ec..ca7b7109306d 100644 --- a/shared/threat-models/change-notes/2026-10-12-ai-threat-model.md +++ b/shared/threat-models/change-notes/released/1.1.0.md @@ -1,4 +1,5 @@ ---- -category: feature ---- +## 1.1.0 + +### New Features + * Added the opt-in `ai` threat model for LLM-generated data. No built-in source models are included. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index d70e426f2a1c..2ac15439f561 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.1.0 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index fc0fd4d45210..8d8291282d57 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.0.60-dev +version: 1.1.0 library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index f9410d0ab245..24989e35b34a 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.60.md b/shared/tutorial/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index 96e5a7a6f743..d312f76200b8 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.60-dev +version: 1.0.60 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 9a22893ab658..1ff01003af3e 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.60.md b/shared/typeflow/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 8e4cdc541154..9fd73bb02bfc 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.60-dev +version: 1.0.60 groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index 8d4c7a2e23da..5baf7ab7928c 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.41 + +No user-facing changes. + ## 0.0.40 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.41.md b/shared/typeinference/change-notes/released/0.0.41.md new file mode 100644 index 000000000000..fc403ab94721 --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.41.md @@ -0,0 +1,3 @@ +## 0.0.41 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index 5706cecbc983..60838ce02183 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.40 +lastReleaseVersion: 0.0.41 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 4c7724b904a1..276beba764b8 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.41-dev +version: 0.0.41 groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index 64cc28837b4b..c1512dc28fe5 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.44 + +No user-facing changes. + ## 2.0.43 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.44.md b/shared/typetracking/change-notes/released/2.0.44.md new file mode 100644 index 000000000000..47addacab148 --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.44.md @@ -0,0 +1,3 @@ +## 2.0.44 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index 26126cee2c6b..2032d0ef8b3f 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.43 +lastReleaseVersion: 2.0.44 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index 348df933bc86..4616f1a031cd 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.44-dev +version: 2.0.44 groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index 8e39674dce26..8f5444c5d611 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.60.md b/shared/typos/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/shared/typos/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index b6dc75fad7b6..3da2374b153d 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.60-dev +version: 1.0.60 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index 5078b167033b..54a333c22075 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.47 + +No user-facing changes. + ## 2.0.46 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.47.md b/shared/util/change-notes/released/2.0.47.md new file mode 100644 index 000000000000..83e9a785f337 --- /dev/null +++ b/shared/util/change-notes/released/2.0.47.md @@ -0,0 +1,3 @@ +## 2.0.47 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index 22c5ae6890d1..cda58352a1c8 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.46 +lastReleaseVersion: 2.0.47 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index 213d21e34f6c..d452288f0631 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.47-dev +version: 2.0.47 groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index 3ef4bd2ab87b..495034190e7d 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.60.md b/shared/xml/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/shared/xml/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index 558b40c7c9a3..d50c2ea0eab9 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.60-dev +version: 1.0.60 groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index 8f4b5e4c3091..a1d5995f2927 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.60 + +No user-facing changes. + ## 1.0.59 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.60.md b/shared/yaml/change-notes/released/1.0.60.md new file mode 100644 index 000000000000..74ecf38fafa0 --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.60.md @@ -0,0 +1,3 @@ +## 1.0.60 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index d70e426f2a1c..e0eab12f1948 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.59 +lastReleaseVersion: 1.0.60 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 3aa02fb8be71..dd30c66848c2 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.60-dev +version: 1.0.60 groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index b355c6068b4d..264f9f465be8 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 6.8.6 + +No user-facing changes. + ## 6.8.5 No user-facing changes. diff --git a/swift/ql/lib/change-notes/released/6.8.6.md b/swift/ql/lib/change-notes/released/6.8.6.md new file mode 100644 index 000000000000..c7c378416ac4 --- /dev/null +++ b/swift/ql/lib/change-notes/released/6.8.6.md @@ -0,0 +1,3 @@ +## 6.8.6 + +No user-facing changes. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index 04b83cac9ccf..d2d656467e1a 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.8.5 +lastReleaseVersion: 6.8.6 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index 115a15d98b75..bfe8387311bf 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 6.8.6-dev +version: 6.8.6 groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index 501e707d6cc9..eb19d8719f62 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.3.13 + +No user-facing changes. + ## 1.3.12 No user-facing changes. diff --git a/swift/ql/src/change-notes/released/1.3.13.md b/swift/ql/src/change-notes/released/1.3.13.md new file mode 100644 index 000000000000..484039d3b4f1 --- /dev/null +++ b/swift/ql/src/change-notes/released/1.3.13.md @@ -0,0 +1,3 @@ +## 1.3.13 + +No user-facing changes. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 834e557ca1df..583d83c793b7 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.12 +lastReleaseVersion: 1.3.13 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index 16e5d9f1bc18..651fafc264ea 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.3.13-dev +version: 1.3.13 groups: - swift - queries