diff --git a/actions/ql/lib/CHANGELOG.md b/actions/ql/lib/CHANGELOG.md index a7a05cbbc290..ba1dabc81f1c 100644 --- a/actions/ql/lib/CHANGELOG.md +++ b/actions/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.7.1 + +No user-facing changes. + ## 0.7.0 ### Breaking Changes diff --git a/actions/ql/lib/change-notes/released/0.7.1.md b/actions/ql/lib/change-notes/released/0.7.1.md new file mode 100644 index 000000000000..86973d360428 --- /dev/null +++ b/actions/ql/lib/change-notes/released/0.7.1.md @@ -0,0 +1,3 @@ +## 0.7.1 + +No user-facing changes. diff --git a/actions/ql/lib/codeql-pack.release.yml b/actions/ql/lib/codeql-pack.release.yml index c761f3e7ab44..e007a9aec3e9 100644 --- a/actions/ql/lib/codeql-pack.release.yml +++ b/actions/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.7.0 +lastReleaseVersion: 0.7.1 diff --git a/actions/ql/lib/qlpack.yml b/actions/ql/lib/qlpack.yml index 00dfb439af70..5355f0b7e024 100644 --- a/actions/ql/lib/qlpack.yml +++ b/actions/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-all -version: 0.7.1-dev +version: 0.7.1 library: true warnOnImplicitThis: true dependencies: diff --git a/actions/ql/src/CHANGELOG.md b/actions/ql/src/CHANGELOG.md index d99ca36e7cc6..359d69214641 100644 --- a/actions/ql/src/CHANGELOG.md +++ b/actions/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.6.39 + +No user-facing changes. + ## 0.6.38 No user-facing changes. diff --git a/actions/ql/src/change-notes/released/0.6.39.md b/actions/ql/src/change-notes/released/0.6.39.md new file mode 100644 index 000000000000..8b72c9e25164 --- /dev/null +++ b/actions/ql/src/change-notes/released/0.6.39.md @@ -0,0 +1,3 @@ +## 0.6.39 + +No user-facing changes. diff --git a/actions/ql/src/codeql-pack.release.yml b/actions/ql/src/codeql-pack.release.yml index 5953c00e4a81..8bb51432d803 100644 --- a/actions/ql/src/codeql-pack.release.yml +++ b/actions/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.6.38 +lastReleaseVersion: 0.6.39 diff --git a/actions/ql/src/qlpack.yml b/actions/ql/src/qlpack.yml index b1a092734a13..672537f4ecc0 100644 --- a/actions/ql/src/qlpack.yml +++ b/actions/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/actions-queries -version: 0.6.39-dev +version: 0.6.39 library: false warnOnImplicitThis: true groups: [actions, queries] diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md index 80c4989f1e93..512af6062bf3 100644 --- a/cpp/ql/lib/CHANGELOG.md +++ b/cpp/ql/lib/CHANGELOG.md @@ -1,3 +1,10 @@ +## 12.4.0 + +### New Features + +* Added support for the `__builtin_lt_synthesizes_from_spaceship`, `__builtin_gt_synthesizes_from_spaceship`, `__builtin_le_synthesizes_from_spaceship`, `__builtin_ge_synthesizes_from_spaceship`, `__builtin_is_implicit_lifetime`, `__builtin_is_structural`, and `__builtin_is_virtual_base_of` builtin operations. +* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type. + ## 12.3.0 ### New Features diff --git a/cpp/ql/lib/change-notes/2026-10-15-bitwidth.md b/cpp/ql/lib/change-notes/2026-10-15-bitwidth.md deleted file mode 100644 index 7d1b3b4248c4..000000000000 --- a/cpp/ql/lib/change-notes/2026-10-15-bitwidth.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type. diff --git a/cpp/ql/lib/change-notes/2026-10-16-builtins.md b/cpp/ql/lib/change-notes/released/12.4.0.md similarity index 70% rename from cpp/ql/lib/change-notes/2026-10-16-builtins.md rename to cpp/ql/lib/change-notes/released/12.4.0.md index 2434e465cd5a..6467dc2b9381 100644 --- a/cpp/ql/lib/change-notes/2026-10-16-builtins.md +++ b/cpp/ql/lib/change-notes/released/12.4.0.md @@ -1,4 +1,6 @@ ---- -category: feature ---- +## 12.4.0 + +### New Features + * Added support for the `__builtin_lt_synthesizes_from_spaceship`, `__builtin_gt_synthesizes_from_spaceship`, `__builtin_le_synthesizes_from_spaceship`, `__builtin_ge_synthesizes_from_spaceship`, `__builtin_is_implicit_lifetime`, `__builtin_is_structural`, and `__builtin_is_virtual_base_of` builtin operations. +* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type. diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml index 2f4c5dac2ed2..6514beb79b03 100644 --- a/cpp/ql/lib/codeql-pack.release.yml +++ b/cpp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 12.3.0 +lastReleaseVersion: 12.4.0 diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml index a32cba70596b..2344034fb40e 100644 --- a/cpp/ql/lib/qlpack.yml +++ b/cpp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-all -version: 12.3.1-dev +version: 12.4.0 groups: cpp dbscheme: semmlecode.cpp.dbscheme extractor: cpp diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md index cfc196ba3c8b..59508a4a2044 100644 --- a/cpp/ql/src/CHANGELOG.md +++ b/cpp/ql/src/CHANGELOG.md @@ -1,3 +1,14 @@ +## 1.10.0 + +### Query Metadata Changes + +* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code. + +### Minor Analysis Improvements + +* The `cpp/suspicious-pointer-scaling` query no longer reports false positives for intentional pointer arithmetic from `std::byte*` buffers. +* The `cpp/unused-local-variable` and `cpp/unused-static-variable` queries no longer report variables marked with the C++17 `[[maybe_unused]]` attribute. + ## 1.9.2 ### Minor Analysis Improvements diff --git a/cpp/ql/src/change-notes/2026-10-12-cpp-code-quality-suite.md b/cpp/ql/src/change-notes/2026-10-12-cpp-code-quality-suite.md deleted file mode 100644 index da96d01b3bad..000000000000 --- a/cpp/ql/src/change-notes/2026-10-12-cpp-code-quality-suite.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: queryMetadata ---- -* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code. diff --git a/cpp/ql/src/change-notes/2026-10-29-suspicious-pointer-scaling-byte.md b/cpp/ql/src/change-notes/2026-10-29-suspicious-pointer-scaling-byte.md deleted file mode 100644 index a8c4c305b094..000000000000 --- a/cpp/ql/src/change-notes/2026-10-29-suspicious-pointer-scaling-byte.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `cpp/suspicious-pointer-scaling` query no longer reports false positives for intentional pointer arithmetic from `std::byte*` buffers. diff --git a/cpp/ql/src/change-notes/2026-10-29-unused-maybe-unused.md b/cpp/ql/src/change-notes/2026-10-29-unused-maybe-unused.md deleted file mode 100644 index a898159583fb..000000000000 --- a/cpp/ql/src/change-notes/2026-10-29-unused-maybe-unused.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -The `cpp/unused-local-variable` and `cpp/unused-static-variable` queries no longer report variables marked with the C++17 `[[maybe_unused]]` attribute. diff --git a/cpp/ql/src/change-notes/released/1.10.0.md b/cpp/ql/src/change-notes/released/1.10.0.md new file mode 100644 index 000000000000..17b337e8419f --- /dev/null +++ b/cpp/ql/src/change-notes/released/1.10.0.md @@ -0,0 +1,10 @@ +## 1.10.0 + +### Query Metadata Changes + +* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code. + +### Minor Analysis Improvements + +* The `cpp/suspicious-pointer-scaling` query no longer reports false positives for intentional pointer arithmetic from `std::byte*` buffers. +* The `cpp/unused-local-variable` and `cpp/unused-static-variable` queries no longer report variables marked with the C++17 `[[maybe_unused]]` attribute. diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml index 842136056d89..753e9ac28449 100644 --- a/cpp/ql/src/codeql-pack.release.yml +++ b/cpp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.9.2 +lastReleaseVersion: 1.10.0 diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml index e61594b23415..6f89d00b24af 100644 --- a/cpp/ql/src/qlpack.yml +++ b/cpp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/cpp-queries -version: 1.9.3-dev +version: 1.10.0 groups: - cpp - queries diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md index 0ece244ec308..9c6f1d52bc65 100644 --- a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.78 + +No user-facing changes. + ## 1.7.77 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.78.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.78.md new file mode 100644 index 000000000000..bd8bfdf80d16 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.78.md @@ -0,0 +1,3 @@ +## 1.7.78 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml index 6ebdd95a6ece..5143d6ab6b9d 100644 --- a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.77 +lastReleaseVersion: 1.7.78 diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml index f815df321b13..c83e978d2234 100644 --- a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-all -version: 1.7.78-dev +version: 1.7.78 groups: - csharp - solorigate diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md index 0ece244ec308..9c6f1d52bc65 100644 --- a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md +++ b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.7.78 + +No user-facing changes. + ## 1.7.77 No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.78.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.78.md new file mode 100644 index 000000000000..bd8bfdf80d16 --- /dev/null +++ b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.7.78.md @@ -0,0 +1,3 @@ +## 1.7.78 + +No user-facing changes. diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml index 6ebdd95a6ece..5143d6ab6b9d 100644 --- a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml +++ b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.7.77 +lastReleaseVersion: 1.7.78 diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml index b708787ad92d..c77efd199e49 100644 --- a/csharp/ql/campaigns/Solorigate/src/qlpack.yml +++ b/csharp/ql/campaigns/Solorigate/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-solorigate-queries -version: 1.7.78-dev +version: 1.7.78 groups: - csharp - solorigate diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md index 0ac8860a7ed0..3084acb9f3d2 100644 --- a/csharp/ql/lib/CHANGELOG.md +++ b/csharp/ql/lib/CHANGELOG.md @@ -1,3 +1,9 @@ +## 7.4.2 + +### Minor Analysis Improvements + +* Rolled back the change that set proxy and certificate environment variables for the subprocess that invokes the NuGet CLI because the environment variables were only partially respected by the target process in some cases. + ## 7.4.1 ### Minor Analysis Improvements diff --git a/csharp/ql/lib/change-notes/2026-10-26-nugetcli-proxy-config-rollback.md b/csharp/ql/lib/change-notes/released/7.4.2.md similarity index 83% rename from csharp/ql/lib/change-notes/2026-10-26-nugetcli-proxy-config-rollback.md rename to csharp/ql/lib/change-notes/released/7.4.2.md index bda5d495d70a..df268fb06818 100644 --- a/csharp/ql/lib/change-notes/2026-10-26-nugetcli-proxy-config-rollback.md +++ b/csharp/ql/lib/change-notes/released/7.4.2.md @@ -1,4 +1,5 @@ ---- -category: minorAnalysis ---- +## 7.4.2 + +### Minor Analysis Improvements + * Rolled back the change that set proxy and certificate environment variables for the subprocess that invokes the NuGet CLI because the environment variables were only partially respected by the target process in some cases. diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml index da28a63a9be9..b39446e5526d 100644 --- a/csharp/ql/lib/codeql-pack.release.yml +++ b/csharp/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.4.1 +lastReleaseVersion: 7.4.2 diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml index af1abccc9f10..987df33446ab 100644 --- a/csharp/ql/lib/qlpack.yml +++ b/csharp/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-all -version: 7.4.2-dev +version: 7.4.2 groups: csharp dbscheme: semmlecode.csharp.dbscheme extractor: csharp diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md index af251858f599..ca515fcf96cd 100644 --- a/csharp/ql/src/CHANGELOG.md +++ b/csharp/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.11.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.10.2 ### Minor Analysis Improvements diff --git a/csharp/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/csharp/ql/src/change-notes/released/1.11.0.md similarity index 84% rename from csharp/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to csharp/ql/src/change-notes/released/1.11.0.md index 6c58615a53a7..537a1c73eb2c 100644 --- a/csharp/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/csharp/ql/src/change-notes/released/1.11.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.11.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml index 7303d5a67610..276088d81dc8 100644 --- a/csharp/ql/src/codeql-pack.release.yml +++ b/csharp/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.10.2 +lastReleaseVersion: 1.11.0 diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml index 8595bac54104..b8d043eaf4d0 100644 --- a/csharp/ql/src/qlpack.yml +++ b/csharp/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/csharp-queries -version: 1.10.3-dev +version: 1.11.0 groups: - csharp - queries diff --git a/go/ql/consistency-queries/CHANGELOG.md b/go/ql/consistency-queries/CHANGELOG.md index 022e978cff17..00beeb1106c7 100644 --- a/go/ql/consistency-queries/CHANGELOG.md +++ b/go/ql/consistency-queries/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/go/ql/consistency-queries/change-notes/released/1.0.61.md b/go/ql/consistency-queries/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/go/ql/consistency-queries/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/go/ql/consistency-queries/codeql-pack.release.yml b/go/ql/consistency-queries/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/go/ql/consistency-queries/codeql-pack.release.yml +++ b/go/ql/consistency-queries/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/go/ql/consistency-queries/qlpack.yml b/go/ql/consistency-queries/qlpack.yml index 30f63700b9e3..a3ff0f89ddc1 100644 --- a/go/ql/consistency-queries/qlpack.yml +++ b/go/ql/consistency-queries/qlpack.yml @@ -1,5 +1,5 @@ name: codeql-go-consistency-queries -version: 1.0.61-dev +version: 1.0.61 groups: - go - queries diff --git a/go/ql/lib/CHANGELOG.md b/go/ql/lib/CHANGELOG.md index 50cff8505a60..55f840973eaf 100644 --- a/go/ql/lib/CHANGELOG.md +++ b/go/ql/lib/CHANGELOG.md @@ -1,3 +1,17 @@ +## 8.1.0 + +### Deprecated APIs + +* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead. + +### New Features + +* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates. + +### Bug Fixes + +* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`. + ## 8.0.1 No user-facing changes. diff --git a/go/ql/lib/change-notes/2026-08-17-deprecate-condition-guard-node.md b/go/ql/lib/change-notes/2026-08-17-deprecate-condition-guard-node.md deleted file mode 100644 index 0d67194c2c0f..000000000000 --- a/go/ql/lib/change-notes/2026-08-17-deprecate-condition-guard-node.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: deprecated ---- -* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead. \ No newline at end of file diff --git a/go/ql/lib/change-notes/2026-08-17-shared-guards.md b/go/ql/lib/change-notes/2026-08-17-shared-guards.md deleted file mode 100644 index 924c2cec272e..000000000000 --- a/go/ql/lib/change-notes/2026-08-17-shared-guards.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: feature ---- -* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates. diff --git a/go/ql/lib/change-notes/2026-10-26-registry-proxy-certificate.md b/go/ql/lib/change-notes/2026-10-26-registry-proxy-certificate.md deleted file mode 100644 index 02f2a422c42c..000000000000 --- a/go/ql/lib/change-notes/2026-10-26-registry-proxy-certificate.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: fix ---- -* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`. diff --git a/go/ql/lib/change-notes/released/8.1.0.md b/go/ql/lib/change-notes/released/8.1.0.md new file mode 100644 index 000000000000..29a390f48645 --- /dev/null +++ b/go/ql/lib/change-notes/released/8.1.0.md @@ -0,0 +1,13 @@ +## 8.1.0 + +### Deprecated APIs + +* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead. + +### New Features + +* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates. + +### Bug Fixes + +* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`. diff --git a/go/ql/lib/codeql-pack.release.yml b/go/ql/lib/codeql-pack.release.yml index 145ae8f5b473..59984961848d 100644 --- a/go/ql/lib/codeql-pack.release.yml +++ b/go/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 8.0.1 +lastReleaseVersion: 8.1.0 diff --git a/go/ql/lib/qlpack.yml b/go/ql/lib/qlpack.yml index 3afaaad22d21..f8ddd2725b5a 100644 --- a/go/ql/lib/qlpack.yml +++ b/go/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-all -version: 8.0.2-dev +version: 8.1.0 groups: go dbscheme: go.dbscheme extractor: go diff --git a/go/ql/src/CHANGELOG.md b/go/ql/src/CHANGELOG.md index 9714c3bcc62c..ea8e2bb9b2c6 100644 --- a/go/ql/src/CHANGELOG.md +++ b/go/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.6.14 + +No user-facing changes. + ## 1.6.13 No user-facing changes. diff --git a/go/ql/src/change-notes/released/1.6.14.md b/go/ql/src/change-notes/released/1.6.14.md new file mode 100644 index 000000000000..161031a3d6e4 --- /dev/null +++ b/go/ql/src/change-notes/released/1.6.14.md @@ -0,0 +1,3 @@ +## 1.6.14 + +No user-facing changes. diff --git a/go/ql/src/codeql-pack.release.yml b/go/ql/src/codeql-pack.release.yml index c34c18075123..4e7f93f87f23 100644 --- a/go/ql/src/codeql-pack.release.yml +++ b/go/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.13 +lastReleaseVersion: 1.6.14 diff --git a/go/ql/src/qlpack.yml b/go/ql/src/qlpack.yml index dca07e4d2962..53d43b5e9ce1 100644 --- a/go/ql/src/qlpack.yml +++ b/go/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/go-queries -version: 1.6.14-dev +version: 1.6.14 groups: - go - queries diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md index a603b244a9a7..d98b8ad60b6d 100644 --- a/java/ql/lib/CHANGELOG.md +++ b/java/ql/lib/CHANGELOG.md @@ -1,3 +1,10 @@ +## 9.3.4 + +### Minor Analysis Improvements + +* The `java/log-injection` query now recognizes additional sanitizers and sanitizer guards from the JDK, Apache Commons Lang and Text, Guava, OWASP Java Encoder, and Spring Framework. +* Queries that use path-injection sanitizers now recognize additional substring guards and string replacement and removal operations from Apache Commons Lang and Guava. + ## 9.3.3 ### Minor Analysis Improvements diff --git a/java/ql/lib/change-notes/2026-10-15-log-injection-sanitizers.md b/java/ql/lib/change-notes/released/9.3.4.md similarity index 89% rename from java/ql/lib/change-notes/2026-10-15-log-injection-sanitizers.md rename to java/ql/lib/change-notes/released/9.3.4.md index 15361a72247d..53015bb0afe1 100644 --- a/java/ql/lib/change-notes/2026-10-15-log-injection-sanitizers.md +++ b/java/ql/lib/change-notes/released/9.3.4.md @@ -1,5 +1,6 @@ ---- -category: minorAnalysis ---- +## 9.3.4 + +### Minor Analysis Improvements + * The `java/log-injection` query now recognizes additional sanitizers and sanitizer guards from the JDK, Apache Commons Lang and Text, Guava, OWASP Java Encoder, and Spring Framework. * Queries that use path-injection sanitizers now recognize additional substring guards and string replacement and removal operations from Apache Commons Lang and Guava. diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml index 0f0b41ca1bdc..9b88f8a94867 100644 --- a/java/ql/lib/codeql-pack.release.yml +++ b/java/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 9.3.3 +lastReleaseVersion: 9.3.4 diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml index 2970bb18d14d..dcb43f42d098 100644 --- a/java/ql/lib/qlpack.yml +++ b/java/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-all -version: 9.3.4-dev +version: 9.3.4 groups: java dbscheme: config/semmlecode.dbscheme extractor: java diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md index 5bc9f1648046..b2ccac02ad00 100644 --- a/java/ql/src/CHANGELOG.md +++ b/java/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.12.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.11.13 No user-facing changes. diff --git a/java/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/java/ql/src/change-notes/released/1.12.0.md similarity index 85% rename from java/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to java/ql/src/change-notes/released/1.12.0.md index 4abdb92b9d7d..81458b24b958 100644 --- a/java/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/java/ql/src/change-notes/released/1.12.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.12.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml index 539b3977389e..59868ba778d8 100644 --- a/java/ql/src/codeql-pack.release.yml +++ b/java/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.11.13 +lastReleaseVersion: 1.12.0 diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml index 2988f55e18bb..fb657b1fc6f1 100644 --- a/java/ql/src/qlpack.yml +++ b/java/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/java-queries -version: 1.11.14-dev +version: 1.12.0 groups: - java - queries diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md index 2d91489d2c7e..b36191fe8c22 100644 --- a/javascript/ql/lib/CHANGELOG.md +++ b/javascript/ql/lib/CHANGELOG.md @@ -1,3 +1,14 @@ +## 3.0.0 + +### Breaking Changes + +* The `SEMMLE_TYPESCRIPT_HOME` environment variable is no longer supported. The JavaScript/TypeScript extractor now ignores the environment variable and always uses its bundled TypeScript compiler. + +### Minor Analysis Improvements + +* Added taint steps for `String.prototype.trimStart`, `trimEnd`, and `normalize`. +* Fixed the flow summary for `Array.prototype.flatMap`. The `thisArg` argument now flows to the callback's `this` instead of its index parameter. + ## 2.10.4 No user-facing changes. diff --git a/javascript/ql/lib/change-notes/2026-10-19-array-flatmap-thisarg.md b/javascript/ql/lib/change-notes/2026-10-19-array-flatmap-thisarg.md deleted file mode 100644 index 43552a901cc2..000000000000 --- a/javascript/ql/lib/change-notes/2026-10-19-array-flatmap-thisarg.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Fixed the flow summary for `Array.prototype.flatMap`. The `thisArg` argument now flows to the callback's `this` instead of its index parameter. diff --git a/javascript/ql/lib/change-notes/2026-10-20-string-trim-normalize.md b/javascript/ql/lib/change-notes/2026-10-20-string-trim-normalize.md deleted file mode 100644 index ccafb5b33836..000000000000 --- a/javascript/ql/lib/change-notes/2026-10-20-string-trim-normalize.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added taint steps for `String.prototype.trimStart`, `trimEnd`, and `normalize`. diff --git a/javascript/ql/lib/change-notes/2026-10-22-remove-typescript-home.md b/javascript/ql/lib/change-notes/2026-10-22-remove-typescript-home.md deleted file mode 100644 index 810b9c60ea12..000000000000 --- a/javascript/ql/lib/change-notes/2026-10-22-remove-typescript-home.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: breaking ---- -* The `SEMMLE_TYPESCRIPT_HOME` environment variable is no longer supported. The JavaScript/TypeScript extractor now ignores the environment variable and always uses its bundled TypeScript compiler. diff --git a/javascript/ql/lib/change-notes/released/3.0.0.md b/javascript/ql/lib/change-notes/released/3.0.0.md new file mode 100644 index 000000000000..07f4ae5ed88f --- /dev/null +++ b/javascript/ql/lib/change-notes/released/3.0.0.md @@ -0,0 +1,10 @@ +## 3.0.0 + +### Breaking Changes + +* The `SEMMLE_TYPESCRIPT_HOME` environment variable is no longer supported. The JavaScript/TypeScript extractor now ignores the environment variable and always uses its bundled TypeScript compiler. + +### Minor Analysis Improvements + +* Added taint steps for `String.prototype.trimStart`, `trimEnd`, and `normalize`. +* Fixed the flow summary for `Array.prototype.flatMap`. The `thisArg` argument now flows to the callback's `this` instead of its index parameter. diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml index ffc1edf876f3..33d3a2cd1139 100644 --- a/javascript/ql/lib/codeql-pack.release.yml +++ b/javascript/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.10.4 +lastReleaseVersion: 3.0.0 diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml index c53b22e5854a..ca5a8e3c52b6 100644 --- a/javascript/ql/lib/qlpack.yml +++ b/javascript/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-all -version: 2.10.5-dev +version: 3.0.0 groups: javascript dbscheme: semmlecode.javascript.dbscheme extractor: javascript diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md index 825eedb33c2c..d0a66885fac5 100644 --- a/javascript/ql/src/CHANGELOG.md +++ b/javascript/ql/src/CHANGELOG.md @@ -1,3 +1,13 @@ +## 2.5.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `js/redos`, `js/polynomial-redos`, `js/regex-injection`, `js/regex-injection-more-sources`, `js/server-crash` and `js/loop-bound-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + +### Minor Analysis Improvements + +* The `js/invalid-prototype-value` query no longer reports computed `__proto__` properties in object literals. + ## 2.4.8 No user-facing changes. diff --git a/javascript/ql/src/change-notes/2026-10-15-invalid-prototype-computed-property.md b/javascript/ql/src/change-notes/2026-10-15-invalid-prototype-computed-property.md deleted file mode 100644 index 56c16ede5106..000000000000 --- a/javascript/ql/src/change-notes/2026-10-15-invalid-prototype-computed-property.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The `js/invalid-prototype-value` query no longer reports computed `__proto__` properties in object literals. diff --git a/javascript/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/javascript/ql/src/change-notes/released/2.5.0.md similarity index 62% rename from javascript/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to javascript/ql/src/change-notes/released/2.5.0.md index f0cd565e6d81..a632bb631969 100644 --- a/javascript/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/javascript/ql/src/change-notes/released/2.5.0.md @@ -1,4 +1,9 @@ ---- -category: queryMetadata ---- +## 2.5.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `js/redos`, `js/polynomial-redos`, `js/regex-injection`, `js/regex-injection-more-sources`, `js/server-crash` and `js/loop-bound-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + +### Minor Analysis Improvements + +* The `js/invalid-prototype-value` query no longer reports computed `__proto__` properties in object literals. diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml index 33a159ab6e0e..a1e889c054a7 100644 --- a/javascript/ql/src/codeql-pack.release.yml +++ b/javascript/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.4.8 +lastReleaseVersion: 2.5.0 diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml index e69ab685a2cd..b11e2ece684d 100644 --- a/javascript/ql/src/qlpack.yml +++ b/javascript/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/javascript-queries -version: 2.4.9-dev +version: 2.5.0 groups: - javascript - queries diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md index 8342bb58f455..f6f103a7e8d0 100644 --- a/misc/suite-helpers/CHANGELOG.md +++ b/misc/suite-helpers/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/misc/suite-helpers/change-notes/released/1.0.61.md b/misc/suite-helpers/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/misc/suite-helpers/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/misc/suite-helpers/codeql-pack.release.yml +++ b/misc/suite-helpers/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml index 80d1ff68a9d1..c25b25ef9d23 100644 --- a/misc/suite-helpers/qlpack.yml +++ b/misc/suite-helpers/qlpack.yml @@ -1,4 +1,4 @@ name: codeql/suite-helpers -version: 1.0.61-dev +version: 1.0.61 groups: shared warnOnImplicitThis: true diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index d8691fc4252d..7c16b1b80260 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 7.2.9 + +No user-facing changes. + ## 7.2.8 ### Minor Analysis Improvements diff --git a/python/ql/lib/change-notes/released/7.2.9.md b/python/ql/lib/change-notes/released/7.2.9.md new file mode 100644 index 000000000000..e308d6bc641d --- /dev/null +++ b/python/ql/lib/change-notes/released/7.2.9.md @@ -0,0 +1,3 @@ +## 7.2.9 + +No user-facing changes. diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml index 75d5ba5ae773..0329e1931ec4 100644 --- a/python/ql/lib/codeql-pack.release.yml +++ b/python/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.2.8 +lastReleaseVersion: 7.2.9 diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml index f665c80eca44..790d679f2722 100644 --- a/python/ql/lib/qlpack.yml +++ b/python/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-all -version: 7.2.9-dev +version: 7.2.9 groups: python dbscheme: semmlecode.python.dbscheme extractor: python diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md index 3273d360f617..16202311b6b2 100644 --- a/python/ql/src/CHANGELOG.md +++ b/python/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.9.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `py/redos`, `py/polynomial-redos` and `py/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.8.13 No user-facing changes. diff --git a/python/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/python/ql/src/change-notes/released/1.9.0.md similarity index 85% rename from python/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to python/ql/src/change-notes/released/1.9.0.md index 295ffb0e705c..b3c4753363eb 100644 --- a/python/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/python/ql/src/change-notes/released/1.9.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.9.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `py/redos`, `py/polynomial-redos` and `py/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml index a0c60d1bc7e6..df17dc3a3662 100644 --- a/python/ql/src/codeql-pack.release.yml +++ b/python/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.8.13 +lastReleaseVersion: 1.9.0 diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml index e39c8a993efc..9721ce156acb 100644 --- a/python/ql/src/qlpack.yml +++ b/python/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/python-queries -version: 1.8.14-dev +version: 1.9.0 groups: - python - queries diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md index 195e65ec4b2d..8d8dbd9cdad6 100644 --- a/ruby/ql/lib/CHANGELOG.md +++ b/ruby/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 7.1.1 + +No user-facing changes. + ## 7.1.0 ### New Features diff --git a/ruby/ql/lib/change-notes/released/7.1.1.md b/ruby/ql/lib/change-notes/released/7.1.1.md new file mode 100644 index 000000000000..849fd4da3283 --- /dev/null +++ b/ruby/ql/lib/change-notes/released/7.1.1.md @@ -0,0 +1,3 @@ +## 7.1.1 + +No user-facing changes. diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml index dcaaa76112a6..8e970df6cae3 100644 --- a/ruby/ql/lib/codeql-pack.release.yml +++ b/ruby/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 7.1.0 +lastReleaseVersion: 7.1.1 diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml index f97e0932dcef..ea3f0332d7d0 100644 --- a/ruby/ql/lib/qlpack.yml +++ b/ruby/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-all -version: 7.1.1-dev +version: 7.1.1 groups: ruby extractor: ruby dbscheme: ruby.dbscheme diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md index 9598ffe138a1..061ac1e12f36 100644 --- a/ruby/ql/src/CHANGELOG.md +++ b/ruby/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.7.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `rb/redos`, `rb/polynomial-redos` and `rb/regexp-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.6.13 No user-facing changes. diff --git a/ruby/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/ruby/ql/src/change-notes/released/1.7.0.md similarity index 85% rename from ruby/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to ruby/ql/src/change-notes/released/1.7.0.md index f3c5468fb136..6dff47e5172a 100644 --- a/ruby/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/ruby/ql/src/change-notes/released/1.7.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.7.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `rb/redos`, `rb/polynomial-redos` and `rb/regexp-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml index c34c18075123..d1184cc67507 100644 --- a/ruby/ql/src/codeql-pack.release.yml +++ b/ruby/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.6.13 +lastReleaseVersion: 1.7.0 diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml index 23eff5250514..566814341ec2 100644 --- a/ruby/ql/src/qlpack.yml +++ b/ruby/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ruby-queries -version: 1.6.14-dev +version: 1.7.0 groups: - ruby - queries diff --git a/rust/ql/lib/CHANGELOG.md b/rust/ql/lib/CHANGELOG.md index 6cafc9fb900c..2fddae495d8d 100644 --- a/rust/ql/lib/CHANGELOG.md +++ b/rust/ql/lib/CHANGELOG.md @@ -1,3 +1,11 @@ +## 0.2.25 + +### Minor Analysis Improvements + +* The early return taken by the `?` operator no longer makes the unwrapped value of `x?` flow out of the enclosing function. This fixes false positive results from queries such as `rust/cleartext-logging`, where a sensitive value read with `?` was reported as part of an unrelated return value. +* Added neutral models to inhibit spurious generated sink models for `actix_web::HttpRequest::connection_info` and the methods built on it, such as `full_url` and `url_for`. This fixes some false positive results from queries such as `rust/uncontrolled-allocation-size` and `rust/log-injection`. +* Added neutral models to inhibit spurious generated sink models for `Vec` and `VecDeque` methods such as `insert`, `remove` and `push_back`. This fixes some false positive results from queries such as `rust/cleartext-logging`. + ## 0.2.24 ### Minor Analysis Improvements diff --git a/rust/ql/lib/change-notes/2026-10-22-neutral-models-vec-vecdeque.md b/rust/ql/lib/change-notes/2026-10-22-neutral-models-vec-vecdeque.md deleted file mode 100644 index 53ebd1cc4d3f..000000000000 --- a/rust/ql/lib/change-notes/2026-10-22-neutral-models-vec-vecdeque.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added neutral models to inhibit spurious generated sink models for `Vec` and `VecDeque` methods such as `insert`, `remove` and `push_back`. This fixes some false positive results from queries such as `rust/cleartext-logging`. diff --git a/rust/ql/lib/change-notes/2026-10-25-neutral-models-actix-connection-info.md b/rust/ql/lib/change-notes/2026-10-25-neutral-models-actix-connection-info.md deleted file mode 100644 index bbe8eacf0cc8..000000000000 --- a/rust/ql/lib/change-notes/2026-10-25-neutral-models-actix-connection-info.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* Added neutral models to inhibit spurious generated sink models for `actix_web::HttpRequest::connection_info` and the methods built on it, such as `full_url` and `url_for`. This fixes some false positive results from queries such as `rust/uncontrolled-allocation-size` and `rust/log-injection`. diff --git a/rust/ql/lib/change-notes/2026-10-27-try-operator-early-return.md b/rust/ql/lib/change-notes/2026-10-27-try-operator-early-return.md deleted file mode 100644 index d80859cc435d..000000000000 --- a/rust/ql/lib/change-notes/2026-10-27-try-operator-early-return.md +++ /dev/null @@ -1,4 +0,0 @@ ---- -category: minorAnalysis ---- -* The early return taken by the `?` operator no longer makes the unwrapped value of `x?` flow out of the enclosing function. This fixes false positive results from queries such as `rust/cleartext-logging`, where a sensitive value read with `?` was reported as part of an unrelated return value. diff --git a/rust/ql/lib/change-notes/released/0.2.25.md b/rust/ql/lib/change-notes/released/0.2.25.md new file mode 100644 index 000000000000..8442f171cf2b --- /dev/null +++ b/rust/ql/lib/change-notes/released/0.2.25.md @@ -0,0 +1,7 @@ +## 0.2.25 + +### Minor Analysis Improvements + +* The early return taken by the `?` operator no longer makes the unwrapped value of `x?` flow out of the enclosing function. This fixes false positive results from queries such as `rust/cleartext-logging`, where a sensitive value read with `?` was reported as part of an unrelated return value. +* Added neutral models to inhibit spurious generated sink models for `actix_web::HttpRequest::connection_info` and the methods built on it, such as `full_url` and `url_for`. This fixes some false positive results from queries such as `rust/uncontrolled-allocation-size` and `rust/log-injection`. +* Added neutral models to inhibit spurious generated sink models for `Vec` and `VecDeque` methods such as `insert`, `remove` and `push_back`. This fixes some false positive results from queries such as `rust/cleartext-logging`. diff --git a/rust/ql/lib/codeql-pack.release.yml b/rust/ql/lib/codeql-pack.release.yml index e4d3f20b369f..901f478b99b2 100644 --- a/rust/ql/lib/codeql-pack.release.yml +++ b/rust/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.2.24 +lastReleaseVersion: 0.2.25 diff --git a/rust/ql/lib/qlpack.yml b/rust/ql/lib/qlpack.yml index c96da2d837f9..7228323921cc 100644 --- a/rust/ql/lib/qlpack.yml +++ b/rust/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-all -version: 0.2.25-dev +version: 0.2.25 groups: rust extractor: rust dbscheme: rust.dbscheme diff --git a/rust/ql/src/CHANGELOG.md b/rust/ql/src/CHANGELOG.md index 99917aab6973..4488024c245b 100644 --- a/rust/ql/src/CHANGELOG.md +++ b/rust/ql/src/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.1.46 + +No user-facing changes. + ## 0.1.45 No user-facing changes. diff --git a/rust/ql/src/change-notes/released/0.1.46.md b/rust/ql/src/change-notes/released/0.1.46.md new file mode 100644 index 000000000000..b77394641b83 --- /dev/null +++ b/rust/ql/src/change-notes/released/0.1.46.md @@ -0,0 +1,3 @@ +## 0.1.46 + +No user-facing changes. diff --git a/rust/ql/src/codeql-pack.release.yml b/rust/ql/src/codeql-pack.release.yml index 3dc3f878c936..4058070c89ec 100644 --- a/rust/ql/src/codeql-pack.release.yml +++ b/rust/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.1.45 +lastReleaseVersion: 0.1.46 diff --git a/rust/ql/src/qlpack.yml b/rust/ql/src/qlpack.yml index 5eecda5b5427..91c7dd8b5e2f 100644 --- a/rust/ql/src/qlpack.yml +++ b/rust/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rust-queries -version: 0.1.46-dev +version: 0.1.46 groups: - rust - queries diff --git a/shared/concepts/CHANGELOG.md b/shared/concepts/CHANGELOG.md index ae5ae1af6662..d2fedcbb7dc0 100644 --- a/shared/concepts/CHANGELOG.md +++ b/shared/concepts/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.35 + +No user-facing changes. + ## 0.0.34 No user-facing changes. diff --git a/shared/concepts/change-notes/released/0.0.35.md b/shared/concepts/change-notes/released/0.0.35.md new file mode 100644 index 000000000000..1ffec5217282 --- /dev/null +++ b/shared/concepts/change-notes/released/0.0.35.md @@ -0,0 +1,3 @@ +## 0.0.35 + +No user-facing changes. diff --git a/shared/concepts/codeql-pack.release.yml b/shared/concepts/codeql-pack.release.yml index 6fb3b6253bb9..143c97892032 100644 --- a/shared/concepts/codeql-pack.release.yml +++ b/shared/concepts/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.34 +lastReleaseVersion: 0.0.35 diff --git a/shared/concepts/qlpack.yml b/shared/concepts/qlpack.yml index b135717ce9e7..0e30dca2ad10 100644 --- a/shared/concepts/qlpack.yml +++ b/shared/concepts/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/concepts -version: 0.0.35-dev +version: 0.0.35 groups: shared library: true dependencies: diff --git a/shared/controlflow/CHANGELOG.md b/shared/controlflow/CHANGELOG.md index 9dd8e5ba57f0..7c3cb2396b76 100644 --- a/shared/controlflow/CHANGELOG.md +++ b/shared/controlflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.45 + +No user-facing changes. + ## 2.0.44 No user-facing changes. diff --git a/shared/controlflow/change-notes/released/2.0.45.md b/shared/controlflow/change-notes/released/2.0.45.md new file mode 100644 index 000000000000..ec5a10154c4d --- /dev/null +++ b/shared/controlflow/change-notes/released/2.0.45.md @@ -0,0 +1,3 @@ +## 2.0.45 + +No user-facing changes. diff --git a/shared/controlflow/codeql-pack.release.yml b/shared/controlflow/codeql-pack.release.yml index 2032d0ef8b3f..c36828b9af04 100644 --- a/shared/controlflow/codeql-pack.release.yml +++ b/shared/controlflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.44 +lastReleaseVersion: 2.0.45 diff --git a/shared/controlflow/qlpack.yml b/shared/controlflow/qlpack.yml index d755d7e7f167..196c984c9941 100644 --- a/shared/controlflow/qlpack.yml +++ b/shared/controlflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/controlflow -version: 2.0.45-dev +version: 2.0.45 groups: shared library: true dependencies: diff --git a/shared/dataflow/CHANGELOG.md b/shared/dataflow/CHANGELOG.md index b86157da7e4e..33e2cdaa8c48 100644 --- a/shared/dataflow/CHANGELOG.md +++ b/shared/dataflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.1.17 + +No user-facing changes. + ## 2.1.16 No user-facing changes. diff --git a/shared/dataflow/change-notes/released/2.1.17.md b/shared/dataflow/change-notes/released/2.1.17.md new file mode 100644 index 000000000000..c8c7d684ff00 --- /dev/null +++ b/shared/dataflow/change-notes/released/2.1.17.md @@ -0,0 +1,3 @@ +## 2.1.17 + +No user-facing changes. diff --git a/shared/dataflow/codeql-pack.release.yml b/shared/dataflow/codeql-pack.release.yml index 95355cd1067e..31e4c041c750 100644 --- a/shared/dataflow/codeql-pack.release.yml +++ b/shared/dataflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.1.16 +lastReleaseVersion: 2.1.17 diff --git a/shared/dataflow/qlpack.yml b/shared/dataflow/qlpack.yml index cf5533d0b7dd..dfe630d6c7c0 100644 --- a/shared/dataflow/qlpack.yml +++ b/shared/dataflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/dataflow -version: 2.1.17-dev +version: 2.1.17 groups: shared library: true dependencies: diff --git a/shared/mad/CHANGELOG.md b/shared/mad/CHANGELOG.md index 361d3336397e..72af4a15007c 100644 --- a/shared/mad/CHANGELOG.md +++ b/shared/mad/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/mad/change-notes/released/1.0.61.md b/shared/mad/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/mad/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/mad/codeql-pack.release.yml b/shared/mad/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/mad/codeql-pack.release.yml +++ b/shared/mad/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/mad/qlpack.yml b/shared/mad/qlpack.yml index 1d575e07dfee..343a2fd57669 100644 --- a/shared/mad/qlpack.yml +++ b/shared/mad/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/mad -version: 1.0.61-dev +version: 1.0.61 groups: shared library: true dependencies: diff --git a/shared/namebinding/CHANGELOG.md b/shared/namebinding/CHANGELOG.md index a59e560c4155..1857b399fe88 100644 --- a/shared/namebinding/CHANGELOG.md +++ b/shared/namebinding/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.10 + +No user-facing changes. + ## 0.0.9 No user-facing changes. diff --git a/shared/namebinding/change-notes/released/0.0.10.md b/shared/namebinding/change-notes/released/0.0.10.md new file mode 100644 index 000000000000..22391080fd45 --- /dev/null +++ b/shared/namebinding/change-notes/released/0.0.10.md @@ -0,0 +1,3 @@ +## 0.0.10 + +No user-facing changes. diff --git a/shared/namebinding/codeql-pack.release.yml b/shared/namebinding/codeql-pack.release.yml index ecdd64fbab86..b740014e5aed 100644 --- a/shared/namebinding/codeql-pack.release.yml +++ b/shared/namebinding/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.9 +lastReleaseVersion: 0.0.10 diff --git a/shared/namebinding/qlpack.yml b/shared/namebinding/qlpack.yml index 772f9ce8fd6b..8e609e2338e2 100644 --- a/shared/namebinding/qlpack.yml +++ b/shared/namebinding/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/namebinding -version: 0.0.10-dev +version: 0.0.10 groups: shared library: true dependencies: diff --git a/shared/quantum/CHANGELOG.md b/shared/quantum/CHANGELOG.md index 6ab8c640bc68..5d7fb2536b42 100644 --- a/shared/quantum/CHANGELOG.md +++ b/shared/quantum/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.39 + +No user-facing changes. + ## 0.0.38 No user-facing changes. diff --git a/shared/quantum/change-notes/released/0.0.39.md b/shared/quantum/change-notes/released/0.0.39.md new file mode 100644 index 000000000000..b492d1378882 --- /dev/null +++ b/shared/quantum/change-notes/released/0.0.39.md @@ -0,0 +1,3 @@ +## 0.0.39 + +No user-facing changes. diff --git a/shared/quantum/codeql-pack.release.yml b/shared/quantum/codeql-pack.release.yml index 078a0e3aff01..3e5b1e56a574 100644 --- a/shared/quantum/codeql-pack.release.yml +++ b/shared/quantum/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.38 +lastReleaseVersion: 0.0.39 diff --git a/shared/quantum/qlpack.yml b/shared/quantum/qlpack.yml index d89d3e2adf4a..3a083d4a50d8 100644 --- a/shared/quantum/qlpack.yml +++ b/shared/quantum/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/quantum -version: 0.0.39-dev +version: 0.0.39 groups: shared library: true dependencies: diff --git a/shared/rangeanalysis/CHANGELOG.md b/shared/rangeanalysis/CHANGELOG.md index 8852bd7bf4d5..cf739503d497 100644 --- a/shared/rangeanalysis/CHANGELOG.md +++ b/shared/rangeanalysis/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/rangeanalysis/change-notes/released/1.0.61.md b/shared/rangeanalysis/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/rangeanalysis/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/rangeanalysis/codeql-pack.release.yml b/shared/rangeanalysis/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/rangeanalysis/codeql-pack.release.yml +++ b/shared/rangeanalysis/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/rangeanalysis/qlpack.yml b/shared/rangeanalysis/qlpack.yml index 986d712f2920..363a379eecf5 100644 --- a/shared/rangeanalysis/qlpack.yml +++ b/shared/rangeanalysis/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/rangeanalysis -version: 1.0.61-dev +version: 1.0.61 groups: shared library: true dependencies: diff --git a/shared/regex/CHANGELOG.md b/shared/regex/CHANGELOG.md index 0f5ef4917bfd..9c25243dac7f 100644 --- a/shared/regex/CHANGELOG.md +++ b/shared/regex/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/regex/change-notes/released/1.0.61.md b/shared/regex/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/regex/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/regex/codeql-pack.release.yml b/shared/regex/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/regex/codeql-pack.release.yml +++ b/shared/regex/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/regex/qlpack.yml b/shared/regex/qlpack.yml index e0f497432ddf..6c45a302ec72 100644 --- a/shared/regex/qlpack.yml +++ b/shared/regex/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/regex -version: 1.0.61-dev +version: 1.0.61 groups: shared library: true dependencies: diff --git a/shared/ssa/CHANGELOG.md b/shared/ssa/CHANGELOG.md index ea8ca229b29e..f7b84cd5f1ff 100644 --- a/shared/ssa/CHANGELOG.md +++ b/shared/ssa/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.37 + +No user-facing changes. + ## 2.0.36 No user-facing changes. diff --git a/shared/ssa/change-notes/released/2.0.37.md b/shared/ssa/change-notes/released/2.0.37.md new file mode 100644 index 000000000000..7d0b67a34af0 --- /dev/null +++ b/shared/ssa/change-notes/released/2.0.37.md @@ -0,0 +1,3 @@ +## 2.0.37 + +No user-facing changes. diff --git a/shared/ssa/codeql-pack.release.yml b/shared/ssa/codeql-pack.release.yml index 7e4aaa0dd676..108259a74002 100644 --- a/shared/ssa/codeql-pack.release.yml +++ b/shared/ssa/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.36 +lastReleaseVersion: 2.0.37 diff --git a/shared/ssa/qlpack.yml b/shared/ssa/qlpack.yml index cbce558a311a..ceed98356af0 100644 --- a/shared/ssa/qlpack.yml +++ b/shared/ssa/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/ssa -version: 2.0.37-dev +version: 2.0.37 groups: shared library: true dependencies: diff --git a/shared/threat-models/CHANGELOG.md b/shared/threat-models/CHANGELOG.md index 69f2c436a8c3..285b5d7169f2 100644 --- a/shared/threat-models/CHANGELOG.md +++ b/shared/threat-models/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.1.1 + +No user-facing changes. + ## 1.1.0 ### New Features diff --git a/shared/threat-models/change-notes/released/1.1.1.md b/shared/threat-models/change-notes/released/1.1.1.md new file mode 100644 index 000000000000..7fb56d366105 --- /dev/null +++ b/shared/threat-models/change-notes/released/1.1.1.md @@ -0,0 +1,3 @@ +## 1.1.1 + +No user-facing changes. diff --git a/shared/threat-models/codeql-pack.release.yml b/shared/threat-models/codeql-pack.release.yml index 2ac15439f561..1a19084be3f7 100644 --- a/shared/threat-models/codeql-pack.release.yml +++ b/shared/threat-models/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.1.0 +lastReleaseVersion: 1.1.1 diff --git a/shared/threat-models/qlpack.yml b/shared/threat-models/qlpack.yml index 9b4f276b0633..260cae1e2db3 100644 --- a/shared/threat-models/qlpack.yml +++ b/shared/threat-models/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/threat-models -version: 1.1.1-dev +version: 1.1.1 library: true groups: shared dataExtensions: diff --git a/shared/tutorial/CHANGELOG.md b/shared/tutorial/CHANGELOG.md index 24989e35b34a..13b6e8fc68bc 100644 --- a/shared/tutorial/CHANGELOG.md +++ b/shared/tutorial/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/tutorial/change-notes/released/1.0.61.md b/shared/tutorial/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/tutorial/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/tutorial/codeql-pack.release.yml b/shared/tutorial/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/tutorial/codeql-pack.release.yml +++ b/shared/tutorial/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/tutorial/qlpack.yml b/shared/tutorial/qlpack.yml index 9c2632029adb..1afd78944704 100644 --- a/shared/tutorial/qlpack.yml +++ b/shared/tutorial/qlpack.yml @@ -1,7 +1,7 @@ name: codeql/tutorial description: Library for the CodeQL detective tutorials, helping new users learn to write CodeQL queries. -version: 1.0.61-dev +version: 1.0.61 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/typeflow/CHANGELOG.md b/shared/typeflow/CHANGELOG.md index 1ff01003af3e..15249ce6100a 100644 --- a/shared/typeflow/CHANGELOG.md +++ b/shared/typeflow/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/typeflow/change-notes/released/1.0.61.md b/shared/typeflow/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/typeflow/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/typeflow/codeql-pack.release.yml b/shared/typeflow/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/typeflow/codeql-pack.release.yml +++ b/shared/typeflow/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/typeflow/qlpack.yml b/shared/typeflow/qlpack.yml index 44f29956996d..d97039604482 100644 --- a/shared/typeflow/qlpack.yml +++ b/shared/typeflow/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeflow -version: 1.0.61-dev +version: 1.0.61 groups: shared library: true dependencies: diff --git a/shared/typeinference/CHANGELOG.md b/shared/typeinference/CHANGELOG.md index 5baf7ab7928c..1d1608eb3abe 100644 --- a/shared/typeinference/CHANGELOG.md +++ b/shared/typeinference/CHANGELOG.md @@ -1,3 +1,7 @@ +## 0.0.42 + +No user-facing changes. + ## 0.0.41 No user-facing changes. diff --git a/shared/typeinference/change-notes/released/0.0.42.md b/shared/typeinference/change-notes/released/0.0.42.md new file mode 100644 index 000000000000..02fe456c7ead --- /dev/null +++ b/shared/typeinference/change-notes/released/0.0.42.md @@ -0,0 +1,3 @@ +## 0.0.42 + +No user-facing changes. diff --git a/shared/typeinference/codeql-pack.release.yml b/shared/typeinference/codeql-pack.release.yml index 60838ce02183..62d36523a656 100644 --- a/shared/typeinference/codeql-pack.release.yml +++ b/shared/typeinference/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 0.0.41 +lastReleaseVersion: 0.0.42 diff --git a/shared/typeinference/qlpack.yml b/shared/typeinference/qlpack.yml index 4d1dd4606f8b..4054b7efbc34 100644 --- a/shared/typeinference/qlpack.yml +++ b/shared/typeinference/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typeinference -version: 0.0.42-dev +version: 0.0.42 groups: shared library: true dependencies: diff --git a/shared/typetracking/CHANGELOG.md b/shared/typetracking/CHANGELOG.md index c1512dc28fe5..fb5e3f88f36d 100644 --- a/shared/typetracking/CHANGELOG.md +++ b/shared/typetracking/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.45 + +No user-facing changes. + ## 2.0.44 No user-facing changes. diff --git a/shared/typetracking/change-notes/released/2.0.45.md b/shared/typetracking/change-notes/released/2.0.45.md new file mode 100644 index 000000000000..ec5a10154c4d --- /dev/null +++ b/shared/typetracking/change-notes/released/2.0.45.md @@ -0,0 +1,3 @@ +## 2.0.45 + +No user-facing changes. diff --git a/shared/typetracking/codeql-pack.release.yml b/shared/typetracking/codeql-pack.release.yml index 2032d0ef8b3f..c36828b9af04 100644 --- a/shared/typetracking/codeql-pack.release.yml +++ b/shared/typetracking/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.44 +lastReleaseVersion: 2.0.45 diff --git a/shared/typetracking/qlpack.yml b/shared/typetracking/qlpack.yml index 7268c10af605..8265f94f474d 100644 --- a/shared/typetracking/qlpack.yml +++ b/shared/typetracking/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typetracking -version: 2.0.45-dev +version: 2.0.45 groups: shared library: true dependencies: diff --git a/shared/typos/CHANGELOG.md b/shared/typos/CHANGELOG.md index 8f5444c5d611..9ee84a0d73da 100644 --- a/shared/typos/CHANGELOG.md +++ b/shared/typos/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/typos/change-notes/released/1.0.61.md b/shared/typos/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/typos/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/typos/codeql-pack.release.yml b/shared/typos/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/typos/codeql-pack.release.yml +++ b/shared/typos/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/typos/qlpack.yml b/shared/typos/qlpack.yml index 29b310bba76f..43151c059153 100644 --- a/shared/typos/qlpack.yml +++ b/shared/typos/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/typos -version: 1.0.61-dev +version: 1.0.61 groups: shared library: true warnOnImplicitThis: true diff --git a/shared/util/CHANGELOG.md b/shared/util/CHANGELOG.md index 54a333c22075..8ff15c74d311 100644 --- a/shared/util/CHANGELOG.md +++ b/shared/util/CHANGELOG.md @@ -1,3 +1,7 @@ +## 2.0.48 + +No user-facing changes. + ## 2.0.47 No user-facing changes. diff --git a/shared/util/change-notes/released/2.0.48.md b/shared/util/change-notes/released/2.0.48.md new file mode 100644 index 000000000000..312243738221 --- /dev/null +++ b/shared/util/change-notes/released/2.0.48.md @@ -0,0 +1,3 @@ +## 2.0.48 + +No user-facing changes. diff --git a/shared/util/codeql-pack.release.yml b/shared/util/codeql-pack.release.yml index cda58352a1c8..7017f5f3b179 100644 --- a/shared/util/codeql-pack.release.yml +++ b/shared/util/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 2.0.47 +lastReleaseVersion: 2.0.48 diff --git a/shared/util/qlpack.yml b/shared/util/qlpack.yml index 96f9dfeae53e..cc51f4991921 100644 --- a/shared/util/qlpack.yml +++ b/shared/util/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/util -version: 2.0.48-dev +version: 2.0.48 groups: shared library: true dependencies: null diff --git a/shared/xml/CHANGELOG.md b/shared/xml/CHANGELOG.md index 495034190e7d..cf24e62f084a 100644 --- a/shared/xml/CHANGELOG.md +++ b/shared/xml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/xml/change-notes/released/1.0.61.md b/shared/xml/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/xml/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/xml/codeql-pack.release.yml b/shared/xml/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/xml/codeql-pack.release.yml +++ b/shared/xml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/xml/qlpack.yml b/shared/xml/qlpack.yml index b942761558aa..7f722a09a9d8 100644 --- a/shared/xml/qlpack.yml +++ b/shared/xml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/xml -version: 1.0.61-dev +version: 1.0.61 groups: shared library: true dependencies: diff --git a/shared/yaml/CHANGELOG.md b/shared/yaml/CHANGELOG.md index a1d5995f2927..7018795e1bb7 100644 --- a/shared/yaml/CHANGELOG.md +++ b/shared/yaml/CHANGELOG.md @@ -1,3 +1,7 @@ +## 1.0.61 + +No user-facing changes. + ## 1.0.60 No user-facing changes. diff --git a/shared/yaml/change-notes/released/1.0.61.md b/shared/yaml/change-notes/released/1.0.61.md new file mode 100644 index 000000000000..432f5481ee83 --- /dev/null +++ b/shared/yaml/change-notes/released/1.0.61.md @@ -0,0 +1,3 @@ +## 1.0.61 + +No user-facing changes. diff --git a/shared/yaml/codeql-pack.release.yml b/shared/yaml/codeql-pack.release.yml index e0eab12f1948..1319f4fe8fde 100644 --- a/shared/yaml/codeql-pack.release.yml +++ b/shared/yaml/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.0.60 +lastReleaseVersion: 1.0.61 diff --git a/shared/yaml/qlpack.yml b/shared/yaml/qlpack.yml index 66cd40521d11..e34a474c6006 100644 --- a/shared/yaml/qlpack.yml +++ b/shared/yaml/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/yaml -version: 1.0.61-dev +version: 1.0.61 groups: shared library: true warnOnImplicitThis: true diff --git a/swift/ql/lib/CHANGELOG.md b/swift/ql/lib/CHANGELOG.md index 264f9f465be8..c62f5da194bc 100644 --- a/swift/ql/lib/CHANGELOG.md +++ b/swift/ql/lib/CHANGELOG.md @@ -1,3 +1,7 @@ +## 6.8.7 + +No user-facing changes. + ## 6.8.6 No user-facing changes. diff --git a/swift/ql/lib/change-notes/released/6.8.7.md b/swift/ql/lib/change-notes/released/6.8.7.md new file mode 100644 index 000000000000..854acbf27edc --- /dev/null +++ b/swift/ql/lib/change-notes/released/6.8.7.md @@ -0,0 +1,3 @@ +## 6.8.7 + +No user-facing changes. diff --git a/swift/ql/lib/codeql-pack.release.yml b/swift/ql/lib/codeql-pack.release.yml index d2d656467e1a..dbafe5e5cf77 100644 --- a/swift/ql/lib/codeql-pack.release.yml +++ b/swift/ql/lib/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 6.8.6 +lastReleaseVersion: 6.8.7 diff --git a/swift/ql/lib/qlpack.yml b/swift/ql/lib/qlpack.yml index 4e6065a1b8e7..cf226df4291a 100644 --- a/swift/ql/lib/qlpack.yml +++ b/swift/ql/lib/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-all -version: 6.8.7-dev +version: 6.8.7 groups: swift extractor: swift dbscheme: swift.dbscheme diff --git a/swift/ql/src/CHANGELOG.md b/swift/ql/src/CHANGELOG.md index eb19d8719f62..ca902a296a23 100644 --- a/swift/ql/src/CHANGELOG.md +++ b/swift/ql/src/CHANGELOG.md @@ -1,3 +1,9 @@ +## 1.4.0 + +### Query Metadata Changes + +* The `external/cwe/cwe-730` tag has been removed from `swift/redos` and `swift/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. + ## 1.3.13 No user-facing changes. diff --git a/swift/ql/src/change-notes/2026-10-21-remove-cwe-730.md b/swift/ql/src/change-notes/released/1.4.0.md similarity index 84% rename from swift/ql/src/change-notes/2026-10-21-remove-cwe-730.md rename to swift/ql/src/change-notes/released/1.4.0.md index ca171e24014d..7cb90fb56e6c 100644 --- a/swift/ql/src/change-notes/2026-10-21-remove-cwe-730.md +++ b/swift/ql/src/change-notes/released/1.4.0.md @@ -1,4 +1,5 @@ ---- -category: queryMetadata ---- +## 1.4.0 + +### Query Metadata Changes + * The `external/cwe/cwe-730` tag has been removed from `swift/redos` and `swift/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags. diff --git a/swift/ql/src/codeql-pack.release.yml b/swift/ql/src/codeql-pack.release.yml index 583d83c793b7..b8b2e97d5086 100644 --- a/swift/ql/src/codeql-pack.release.yml +++ b/swift/ql/src/codeql-pack.release.yml @@ -1,2 +1,2 @@ --- -lastReleaseVersion: 1.3.13 +lastReleaseVersion: 1.4.0 diff --git a/swift/ql/src/qlpack.yml b/swift/ql/src/qlpack.yml index 4f9b787b8d24..19993a34db81 100644 --- a/swift/ql/src/qlpack.yml +++ b/swift/ql/src/qlpack.yml @@ -1,5 +1,5 @@ name: codeql/swift-queries -version: 1.3.14-dev +version: 1.4.0 groups: - swift - queries