henrymercer · Oct 29, 2026 · Oct 29, 2026 · Oct 29, 2026
@@ -1,3 +1,7 @@
+## 0.7.1
+
+No user-facing changes.
+
 ## 0.7.0
 
 ### Breaking Changes

@@ -0,0 +1,3 @@
+## 0.7.1
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.7.0
+lastReleaseVersion: 0.7.1
@@ -1,5 +1,5 @@
 name: codeql/actions-all
-version: 0.7.1-dev
+version: 0.7.1
 library: true
 warnOnImplicitThis: true
 dependencies:

@@ -1,3 +1,7 @@
+## 0.6.39
+
+No user-facing changes.
+
 ## 0.6.38
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 0.6.39
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.6.38
+lastReleaseVersion: 0.6.39
@@ -1,5 +1,5 @@
 name: codeql/actions-queries
-version: 0.6.39-dev
+version: 0.6.39
 library: false
 warnOnImplicitThis: true
 groups: [actions, queries]

@@ -1,3 +1,10 @@
+## 12.4.0
+
+### New Features
+
+* Added support for the `__builtin_lt_synthesizes_from_spaceship`, `__builtin_gt_synthesizes_from_spaceship`, `__builtin_le_synthesizes_from_spaceship`, `__builtin_ge_synthesizes_from_spaceship`, `__builtin_is_implicit_lifetime`, `__builtin_is_structural`, and `__builtin_is_virtual_base_of` builtin operations.
+* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type.
+
 ## 12.3.0
 
 ### New Features

@@ -1,4 +1,6 @@
----
-category: feature
----
+## 12.4.0
+
+### New Features
+
 * Added support for the `__builtin_lt_synthesizes_from_spaceship`, `__builtin_gt_synthesizes_from_spaceship`, `__builtin_le_synthesizes_from_spaceship`, `__builtin_ge_synthesizes_from_spaceship`, `__builtin_is_implicit_lifetime`, `__builtin_is_structural`, and `__builtin_is_virtual_base_of` builtin operations.
+* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 12.3.0
+lastReleaseVersion: 12.4.0
@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 12.3.1-dev
+version: 12.4.0
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

@@ -1,3 +1,14 @@
+## 1.10.0
+
+### Query Metadata Changes
+
+* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code.
+
+### Minor Analysis Improvements
+
+* The `cpp/suspicious-pointer-scaling` query no longer reports false positives for intentional pointer arithmetic from `std::byte*` buffers.
+* The `cpp/unused-local-variable` and `cpp/unused-static-variable` queries no longer report variables marked with the C++17 `[[maybe_unused]]` attribute.
+
 ## 1.9.2
 
 ### Minor Analysis Improvements

@@ -0,0 +1,10 @@
+## 1.10.0
+
+### Query Metadata Changes
+
+* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code.
+
+### Minor Analysis Improvements
+
+* The `cpp/suspicious-pointer-scaling` query no longer reports false positives for intentional pointer arithmetic from `std::byte*` buffers.
+* The `cpp/unused-local-variable` and `cpp/unused-static-variable` queries no longer report variables marked with the C++17 `[[maybe_unused]]` attribute.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.9.2
+lastReleaseVersion: 1.10.0
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 1.9.3-dev
+version: 1.10.0
 groups:
   - cpp
   - queries

@@ -1,3 +1,7 @@
+## 1.7.78
+
+No user-facing changes.
+
 ## 1.7.77
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.7.78
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.77
+lastReleaseVersion: 1.7.78
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.7.78-dev
+version: 1.7.78
 groups:
   - csharp
   - solorigate

@@ -1,3 +1,7 @@
+## 1.7.78
+
+No user-facing changes.
+
 ## 1.7.77
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.7.78
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.77
+lastReleaseVersion: 1.7.78
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.7.78-dev
+version: 1.7.78
 groups:
   - csharp
   - solorigate

@@ -1,3 +1,9 @@
+## 7.4.2
+
+### Minor Analysis Improvements
+
+* Rolled back the change that set proxy and certificate environment variables for the subprocess that invokes the NuGet CLI because the environment variables were only partially respected by the target process in some cases.
+
 ## 7.4.1
 
 ### Minor Analysis Improvements

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 7.4.2
+
+### Minor Analysis Improvements
+
 * Rolled back the change that set proxy and certificate environment variables for the subprocess that invokes the NuGet CLI because the environment variables were only partially respected by the target process in some cases.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 7.4.1
+lastReleaseVersion: 7.4.2
@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 7.4.2-dev
+version: 7.4.2
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

@@ -1,3 +1,9 @@
+## 1.11.0
+
+### Query Metadata Changes
+
+* The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.
+
 ## 1.10.2
 
 ### Minor Analysis Improvements

@@ -1,4 +1,5 @@
----
-category: queryMetadata
----
+## 1.11.0
+
+### Query Metadata Changes
+
 * The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.10.2
+lastReleaseVersion: 1.11.0
@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 1.10.3-dev
+version: 1.11.0
 groups:
   - csharp
   - queries

@@ -1,3 +1,7 @@
+## 1.0.61
+
+No user-facing changes.
+
 ## 1.0.60
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.0.61
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.60
+lastReleaseVersion: 1.0.61
@@ -1,5 +1,5 @@
 name: codeql-go-consistency-queries
-version: 1.0.61-dev
+version: 1.0.61
 groups:
   - go
   - queries

@@ -1,3 +1,17 @@
+## 8.1.0
+
+### Deprecated APIs
+
+* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead.
+
+### New Features
+
+* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates.
+
+### Bug Fixes
+
+* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`.
+
 ## 8.0.1
 
 No user-facing changes.

@@ -0,0 +1,13 @@
+## 8.1.0
+
+### Deprecated APIs
+
+* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead.
+
+### New Features
+
+* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates.
+
+### Bug Fixes
+
+* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 8.0.1
+lastReleaseVersion: 8.1.0
@@ -1,5 +1,5 @@
 name: codeql/go-all
-version: 8.0.2-dev
+version: 8.1.0
 groups: go
 dbscheme: go.dbscheme
 extractor: go

@@ -1,3 +1,7 @@
+## 1.6.14
+
+No user-facing changes.
+
 ## 1.6.13
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.6.14
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.6.13
+lastReleaseVersion: 1.6.14
@@ -1,5 +1,5 @@
 name: codeql/go-queries
-version: 1.6.14-dev
+version: 1.6.14
 groups:
   - go
   - queries

@@ -1,3 +1,10 @@
+## 9.3.4
+
+### Minor Analysis Improvements
+
+* The `java/log-injection` query now recognizes additional sanitizers and sanitizer guards from the JDK, Apache Commons Lang and Text, Guava, OWASP Java Encoder, and Spring Framework.
+* Queries that use path-injection sanitizers now recognize additional substring guards and string replacement and removal operations from Apache Commons Lang and Guava.
+
 ## 9.3.3
 
 ### Minor Analysis Improvements

@@ -1,5 +1,6 @@
----
-category: minorAnalysis
----
+## 9.3.4
+
+### Minor Analysis Improvements
+
 * The `java/log-injection` query now recognizes additional sanitizers and sanitizer guards from the JDK, Apache Commons Lang and Text, Guava, OWASP Java Encoder, and Spring Framework.
 * Queries that use path-injection sanitizers now recognize additional substring guards and string replacement and removal operations from Apache Commons Lang and Guava.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 9.3.3
+lastReleaseVersion: 9.3.4
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 9.3.4-dev
+version: 9.3.4
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

@@ -1,3 +1,9 @@
+## 1.12.0
+
+### Query Metadata Changes
+
+* The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.
+
 ## 1.11.13
 
 No user-facing changes.

@@ -1,4 +1,5 @@
----
-category: queryMetadata
----
+## 1.12.0
+
+### Query Metadata Changes
+
 * The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.