Release preparation for version 2.7.3

github-actions[bot] · github-actions[bot] · commit 337ce65fe592 · 2021-11-30T20:39:35.000Z
diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md
@@ -1,7 +1,7 @@
----
-category: feature
-tags: [lgtm,codescanning]
----
+## 0.0.4
+
+### New Features
+
 * The QL library `semmle.code.cpp.commons.Exclusions` now contains a predicate
   `isFromSystemMacroDefinition` for identifying code that originates from a
   macro outside the project being analyzed.
diff --git a/cpp/ql/lib/change-notes/released/0.0.4.md b/cpp/ql/lib/change-notes/released/0.0.4.md
@@ -0,0 +1,7 @@
+## 0.0.4
+
+### New Features
+
+* The QL library `semmle.code.cpp.commons.Exclusions` now contains a predicate
+  `isFromSystemMacroDefinition` for identifying code that originates from a
+  macro outside the project being analyzed.
diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 0.0.3
+version: 0.0.4
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp
diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md
@@ -1,5 +1,5 @@
----
-category: newQuery
-tags: [lgtm,codescanning]
----
+## 0.0.4
+
+### New Queries
+
 * A new query `cpp/non-https-url` has been added for C/C++. The query flags uses of `http` URLs that might be better replaced with `https`.
diff --git a/cpp/ql/src/change-notes/released/0.0.4.md b/cpp/ql/src/change-notes/released/0.0.4.md
@@ -0,0 +1,5 @@
+## 0.0.4
+
+### New Queries
+
+* A new query `cpp/non-https-url` has been added for C/C++. The query flags uses of `http` URLs that might be better replaced with `https`.
diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.0.3
+version: 0.0.4
 groups: cpp
 dependencies:
     codeql/cpp-all: "*"
diff --git a/cpp/upgrades/CHANGELOG.md b/cpp/upgrades/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/cpp/upgrades/change-notes/released/0.0.4.md b/cpp/upgrades/change-notes/released/0.0.4.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/cpp/upgrades/codeql-pack.release.yml b/cpp/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/cpp/upgrades/qlpack.yml b/cpp/upgrades/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-upgrades
 groups: cpp
 upgrades: .
-version: 0.0.3
+version: 0.0.4
 library: true
diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/csharp/ql/lib/change-notes/released/0.0.4.md b/csharp/ql/lib/change-notes/released/0.0.4.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 0.0.3
+version: 0.0.4
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp
diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/csharp/ql/src/change-notes/released/0.0.4.md b/csharp/ql/src/change-notes/released/0.0.4.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 0.0.3
+version: 0.0.4
 groups: csharp
 suites: codeql-suites
 extractor: csharp
diff --git a/csharp/upgrades/CHANGELOG.md b/csharp/upgrades/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/csharp/upgrades/change-notes/released/0.0.4.md b/csharp/upgrades/change-notes/released/0.0.4.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/csharp/upgrades/codeql-pack.release.yml b/csharp/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/csharp/upgrades/qlpack.yml b/csharp/upgrades/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-upgrades
 groups: csharp
-version: 0.0.3
+version: 0.0.4
 upgrades: .
 library: true
diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md
@@ -1,6 +1,7 @@
----
-category: fix
-tags: [lgtm,codescanning]
----
+## 0.0.4
+
+### Bug Fixes
+
 * `CharacterLiteral`'s `getCodePointValue` predicate now returns the correct value for UTF-16 surrogates.
 * The `RangeAnalysis` module and the `java/constant-comparison` queries no longer raise false alerts regarding comparisons with Unicode surrogate character literals.
+* The predicate `Method.overrides(Method)` was accidentally transitive. This has been fixed. This fix also affects `Method.overridesOrInstantiates(Method)` and `Method.getASourceOverriddenMethod()`.
diff --git a/java/ql/lib/change-notes/2021-11-15-overrides.md b/java/ql/lib/change-notes/2021-11-15-overrides.md
diff --git a/java/ql/lib/change-notes/released/0.0.4.md b/java/ql/lib/change-notes/released/0.0.4.md
@@ -0,0 +1,7 @@
+## 0.0.4
+
+### Bug Fixes
+
+* `CharacterLiteral`'s `getCodePointValue` predicate now returns the correct value for UTF-16 surrogates.
+* The `RangeAnalysis` module and the `java/constant-comparison` queries no longer raise false alerts regarding comparisons with Unicode surrogate character literals.
+* The predicate `Method.overrides(Method)` was accidentally transitive. This has been fixed. This fix also affects `Method.overridesOrInstantiates(Method)` and `Method.getASourceOverriddenMethod()`.
diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.0.3
+version: 0.0.4
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java
diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/java/ql/src/change-notes/released/0.0.4.md b/java/ql/src/change-notes/released/0.0.4.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.0.3
+version: 0.0.4
 groups: java
 suites: codeql-suites
 extractor: java
diff --git a/java/upgrades/CHANGELOG.md b/java/upgrades/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/java/upgrades/change-notes/released/0.0.4.md b/java/upgrades/change-notes/released/0.0.4.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/java/upgrades/codeql-pack.release.yml b/java/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/java/upgrades/qlpack.yml b/java/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/java-upgrades
 groups: java
 upgrades: .
 library: true
-version: 0.0.3
+version: 0.0.4
diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.5
diff --git a/javascript/ql/lib/change-notes/released/0.0.5.md b/javascript/ql/lib/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 0.0.4
+version: 0.0.5
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript
diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md
@@ -0,0 +1,7 @@
+## 0.0.5
+
+### New Queries
+
+* The `js/sensitive-get-query` query has been added. It highlights GET requests that read sensitive information from the query string.
+* The `js/insufficient-key-size` query has been added. It highlights the creation of cryptographic keys with a short key size.
+* The `js/session-fixation` query has been added. It highlights servers that reuse a session after a user has logged in.
diff --git a/javascript/ql/src/change-notes/2021-11-02-insufficient-key-size.md b/javascript/ql/src/change-notes/2021-11-02-insufficient-key-size.md
diff --git a/javascript/ql/src/change-notes/2021-11-02-session-fixation.md b/javascript/ql/src/change-notes/2021-11-02-session-fixation.md
diff --git a/javascript/ql/src/change-notes/2021-11-04-sensitive-get-query.md b/javascript/ql/src/change-notes/2021-11-04-sensitive-get-query.md
diff --git a/javascript/ql/src/change-notes/released/0.0.5.md b/javascript/ql/src/change-notes/released/0.0.5.md
@@ -0,0 +1,7 @@
+## 0.0.5
+
+### New Queries
+
+* The `js/sensitive-get-query` query has been added. It highlights GET requests that read sensitive information from the query string.
+* The `js/insufficient-key-size` query has been added. It highlights the creation of cryptographic keys with a short key size.
+* The `js/session-fixation` query has been added. It highlights servers that reuse a session after a user has logged in.
diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 0.0.4
+version: 0.0.5
 groups: javascript
 suites: codeql-suites
 extractor: javascript
diff --git a/javascript/upgrades/CHANGELOG.md b/javascript/upgrades/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.5
diff --git a/javascript/upgrades/change-notes/released/0.0.5.md b/javascript/upgrades/change-notes/released/0.0.5.md
@@ -0,0 +1 @@
+## 0.0.5
diff --git a/javascript/upgrades/codeql-pack.release.yml b/javascript/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.4
+lastReleaseVersion: 0.0.5
diff --git a/javascript/upgrades/qlpack.yml b/javascript/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/javascript-upgrades
 groups: javascript
 upgrades: .
 library: true
-version: 0.0.4
+version: 0.0.5
diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md
@@ -0,0 +1,10 @@
+## 0.0.4
+
+### Major Analysis Improvements
+
+* Added modeling of `os.stat`, `os.lstat`, `os.statvfs`, `os.fstat`, and `os.fstatvfs`, which are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
+* Added modeling of `aiopg` for sinks executing SQL.
+* Added modeling of HTTP requests and responses when using `flask_admin` (`Flask-Admin` PyPI package), which leads to additional remote flow sources.
+* Added modeling of the PyPI package `toml`, which provides encoding/decoding of TOML documents, leading to new taint-tracking steps.
diff --git a/python/ql/lib/change-notes/2021-11-02-flask_admin.md b/python/ql/lib/change-notes/2021-11-02-flask_admin.md
diff --git a/python/ql/lib/change-notes/2021-11-02-toml.md b/python/ql/lib/change-notes/2021-11-02-toml.md
diff --git a/python/ql/lib/change-notes/2021-11-09-model-aiopg.md b/python/ql/lib/change-notes/2021-11-09-model-aiopg.md
diff --git a/python/ql/lib/change-notes/2021-11-15-model-wsgiref-simple-server-app.md b/python/ql/lib/change-notes/2021-11-15-model-wsgiref-simple-server-app.md
diff --git a/python/ql/lib/change-notes/2021-11-16-os-stat.md b/python/ql/lib/change-notes/2021-11-16-os-stat.md
diff --git a/python/ql/lib/change-notes/2021-11-16-posixpath.md b/python/ql/lib/change-notes/2021-11-16-posixpath.md
diff --git a/python/ql/lib/change-notes/released/0.0.4.md b/python/ql/lib/change-notes/released/0.0.4.md
@@ -0,0 +1,10 @@
+## 0.0.4
+
+### Major Analysis Improvements
+
+* Added modeling of `os.stat`, `os.lstat`, `os.statvfs`, `os.fstat`, and `os.fstatvfs`, which are new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of the `posixpath`, `ntpath`, and `genericpath` modules for path operations (although these are not supposed to be used), resulting in new sinks for the _Uncontrolled data used in path expression_ (`py/path-injection`) query.
+* Added modeling of `wsgiref.simple_server` applications, leading to new remote flow sources.
+* Added modeling of `aiopg` for sinks executing SQL.
+* Added modeling of HTTP requests and responses when using `flask_admin` (`Flask-Admin` PyPI package), which leads to additional remote flow sources.
+* Added modeling of the PyPI package `toml`, which provides encoding/decoding of TOML documents, leading to new taint-tracking steps.
diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 0.0.3
+version: 0.0.4
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python
diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md
@@ -1,5 +1,5 @@
----
-category: queryMetadata
-tags: [lgtm,codescanning]
----
+## 0.0.4
+
+### Query Metadata Changes
+
 * Fixed the query ids of two queries that are meant for manual exploration: `python/count-untrusted-data-external-api` and `python/untrusted-data-to-external-api` have been changed to `py/count-untrusted-data-external-api` and `py/untrusted-data-to-external-api`.
diff --git a/python/ql/src/change-notes/released/0.0.4.md b/python/ql/src/change-notes/released/0.0.4.md
@@ -0,0 +1,5 @@
+## 0.0.4
+
+### Query Metadata Changes
+
+* Fixed the query ids of two queries that are meant for manual exploration: `python/count-untrusted-data-external-api` and `python/untrusted-data-to-external-api` have been changed to `py/count-untrusted-data-external-api` and `py/untrusted-data-to-external-api`.
diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 0.0.3
+version: 0.0.4
 groups: python
 dependencies:
     codeql/python-all: "*"
diff --git a/python/upgrades/CHANGELOG.md b/python/upgrades/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/python/upgrades/change-notes/released/0.0.4.md b/python/upgrades/change-notes/released/0.0.4.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/python/upgrades/codeql-pack.release.yml b/python/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/python/upgrades/qlpack.yml b/python/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/python-upgrades
 groups: python
 upgrades: .
 library: true
-version: 0.0.3
+version: 0.0.4
diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/ruby/ql/lib/change-notes/released/0.0.4.md b/ruby/ql/lib/change-notes/released/0.0.4.md
@@ -0,0 +1 @@
+## 0.0.4
diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.3
+lastReleaseVersion: 0.0.4
diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 0.0.3
+version: 0.0.4
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme
diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md
@@ -0,0 +1,10 @@
+## 0.0.4
+
+### New Queries
+
+* A new query (`rb/request-forgery`) has been added. The query finds HTTP requests made with user-controlled URLs.
+* A new query (`rb/csrf-protection-disabled`) has been added. The query finds cases where cross-site forgery protection is explictly disabled.
+
+### Query Metadata Changes
+
+* The precision of "Hard-coded credentials" (`rb/hardcoded-credentials`) has been decreased from "high" to "medium". This query will no longer be run and displayed by default on Code Scanning and LGTM.
diff --git a/ruby/ql/src/change-notes/2021-11-04-csrf-protection-disabled.md b/ruby/ql/src/change-notes/2021-11-04-csrf-protection-disabled.md
diff --git a/ruby/ql/src/change-notes/2021-11-08-hardcoded-credentials-downgrade.md b/ruby/ql/src/change-notes/2021-11-08-hardcoded-credentials-downgrade.md
diff --git a/ruby/ql/src/change-notes/2021-11-09-request-forgery.md b/ruby/ql/src/change-notes/2021-11-09-request-forgery.md
diff --git a/ruby/ql/src/change-notes/released/0.0.4.md b/ruby/ql/src/change-notes/released/0.0.4.md
diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml
diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`---`
`2`		`-lastReleaseVersion: 0.0.3`
	`2`	`+lastReleaseVersion: 0.0.4`