Merge pull request #7510 from github/release-prep/2.7.5

hvitved · web-flow · commit fd60c6e1ad81 · 2022-01-04T18:57:43.000+01:00
Release preparation for version 2.7.5
diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ## 0.0.4
diff --git a/cpp/ql/lib/change-notes/released/0.0.6.md b/cpp/ql/lib/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 0.0.6-dev
+version: 0.0.6
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp
diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ### New Queries
diff --git a/cpp/ql/src/change-notes/released/0.0.6.md b/cpp/ql/src/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.0.6-dev
+version: 0.0.6
 groups: cpp
 dependencies:
     codeql/cpp-all: "*"
diff --git a/cpp/upgrades/CHANGELOG.md b/cpp/upgrades/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ## 0.0.4
diff --git a/cpp/upgrades/change-notes/released/0.0.6.md b/cpp/upgrades/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/cpp/upgrades/codeql-pack.release.yml b/cpp/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/cpp/upgrades/qlpack.yml b/cpp/upgrades/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-upgrades
 groups: cpp
 upgrades: .
-version: 0.0.6-dev
+version: 0.0.6
 library: true
diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ## 0.0.4
diff --git a/csharp/ql/lib/change-notes/released/0.0.6.md b/csharp/ql/lib/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 0.0.6-dev
+version: 0.0.6
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp
diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ## 0.0.4
diff --git a/csharp/ql/src/change-notes/released/0.0.6.md b/csharp/ql/src/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 0.0.6-dev
+version: 0.0.6
 groups: csharp
 suites: codeql-suites
 extractor: csharp
diff --git a/csharp/upgrades/CHANGELOG.md b/csharp/upgrades/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ## 0.0.4
diff --git a/csharp/upgrades/change-notes/released/0.0.6.md b/csharp/upgrades/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/csharp/upgrades/codeql-pack.release.yml b/csharp/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/csharp/upgrades/qlpack.yml b/csharp/upgrades/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-upgrades
 groups: csharp
-version: 0.0.6-dev
+version: 0.0.6
 upgrades: .
 library: true
diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md
@@ -1,3 +1,9 @@
+## 0.0.6
+
+### Major Analysis Improvements
+
+* Data flow now propagates taint from remote source `Parameter` types to read steps of their fields (e.g. `tainted.publicField` or `tainted.getField()`). This also applies to their subtypes and the types of their fields, recursively.
+
 ## 0.0.5
 
 ### Bug Fixes
diff --git a/java/ql/lib/change-notes/released/0.0.6.md b/java/ql/lib/change-notes/released/0.0.6.md
@@ -1,4 +1,5 @@
----
-category: majorAnalysis
----
+## 0.0.6
+
+### Major Analysis Improvements
+
 * Data flow now propagates taint from remote source `Parameter` types to read steps of their fields (e.g. `tainted.publicField` or `tainted.getField()`). This also applies to their subtypes and the types of their fields, recursively.
diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.0.6-dev
+version: 0.0.6
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java
diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ### Minor Analysis Improvements
diff --git a/java/ql/src/change-notes/released/0.0.6.md b/java/ql/src/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.0.6-dev
+version: 0.0.6
 groups: java
 suites: codeql-suites
 extractor: java
diff --git a/java/upgrades/CHANGELOG.md b/java/upgrades/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ## 0.0.4
diff --git a/java/upgrades/change-notes/released/0.0.6.md b/java/upgrades/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/java/upgrades/codeql-pack.release.yml b/java/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/java/upgrades/qlpack.yml b/java/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/java-upgrades
 groups: java
 upgrades: .
 library: true
-version: 0.0.6-dev
+version: 0.0.6
diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.7
+
 ## 0.0.6
 
 ### New Features
diff --git a/javascript/ql/lib/change-notes/released/0.0.7.md b/javascript/ql/lib/change-notes/released/0.0.7.md
@@ -0,0 +1 @@
+## 0.0.7
diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.6
+lastReleaseVersion: 0.0.7
diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 0.0.7-dev
+version: 0.0.7
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript
diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md
@@ -1,3 +1,12 @@
+## 0.0.7
+
+### Minor Analysis Improvements
+
+* Support for handlebars templates has improved. Raw interpolation tags of the form `{{& ... }}` are now recognized,
+  as well as whitespace-trimming tags like `{{~ ... }}`.
+* Data flow is now tracked across middleware functions in more cases, leading to more security results in general. Affected packages are `express` and `fastify`.
+* `js/missing-token-validation` has been made more precise, yielding both fewer false positives and more true positives.
+
 ## 0.0.6
 
 ### Major Analysis Improvements
diff --git a/javascript/ql/src/change-notes/2021-12-07-handlebars-more-raw-interpolation.md b/javascript/ql/src/change-notes/2021-12-07-handlebars-more-raw-interpolation.md
diff --git a/javascript/ql/src/change-notes/released/0.0.7.md b/javascript/ql/src/change-notes/released/0.0.7.md
@@ -1,5 +1,8 @@
----
-category: minorAnalysis
----
+## 0.0.7
+
+### Minor Analysis Improvements
+
+* Support for handlebars templates has improved. Raw interpolation tags of the form `{{& ... }}` are now recognized,
+  as well as whitespace-trimming tags like `{{~ ... }}`.
 * Data flow is now tracked across middleware functions in more cases, leading to more security results in general. Affected packages are `express` and `fastify`.
 * `js/missing-token-validation` has been made more precise, yielding both fewer false positives and more true positives.
diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.6
+lastReleaseVersion: 0.0.7
diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 0.0.7-dev
+version: 0.0.7
 groups: javascript
 suites: codeql-suites
 extractor: javascript
diff --git a/javascript/upgrades/CHANGELOG.md b/javascript/upgrades/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.7
+
 ## 0.0.6
 
 ## 0.0.5
diff --git a/javascript/upgrades/change-notes/released/0.0.7.md b/javascript/upgrades/change-notes/released/0.0.7.md
@@ -0,0 +1 @@
+## 0.0.7
diff --git a/javascript/upgrades/codeql-pack.release.yml b/javascript/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.6
+lastReleaseVersion: 0.0.7
diff --git a/javascript/upgrades/qlpack.yml b/javascript/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/javascript-upgrades
 groups: javascript
 upgrades: .
 library: true
-version: 0.0.7-dev
+version: 0.0.7
diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ### Minor Analysis Improvements
diff --git a/python/ql/lib/change-notes/released/0.0.6.md b/python/ql/lib/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 0.0.6-dev
+version: 0.0.6
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python
diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md
@@ -1,3 +1,13 @@
+## 0.0.6
+
+### New Queries
+
+* Two new queries have been added for detecting Server-side request forgery (SSRF). _Full server-side request forgery_ (`py/full-ssrf`) will only alert when the URL is fully user-controlled, and _Partial server-side request forgery_ (`py/partial-ssrf`) will alert when any part of the URL is user-controlled. Only `py/full-ssrf` will be run by default.
+
+### Minor Analysis Improvements
+
+* To support the new SSRF queries, the PyPI package `requests` has been modeled, along with `http.client.HTTP[S]Connection` from the standard library.
+
 ## 0.0.5
 
 ### Minor Analysis Improvements
diff --git a/python/ql/src/change-notes/2021-12-17-add-SSRF-analysis.md b/python/ql/src/change-notes/2021-12-17-add-SSRF-analysis.md
diff --git a/python/ql/src/change-notes/released/0.0.6.md b/python/ql/src/change-notes/released/0.0.6.md
@@ -1,4 +1,9 @@
----
-category: newQuery
----
+## 0.0.6
+
+### New Queries
+
 * Two new queries have been added for detecting Server-side request forgery (SSRF). _Full server-side request forgery_ (`py/full-ssrf`) will only alert when the URL is fully user-controlled, and _Partial server-side request forgery_ (`py/partial-ssrf`) will alert when any part of the URL is user-controlled. Only `py/full-ssrf` will be run by default.
+
+### Minor Analysis Improvements
+
+* To support the new SSRF queries, the PyPI package `requests` has been modeled, along with `http.client.HTTP[S]Connection` from the standard library.
diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 0.0.6-dev
+version: 0.0.6
 groups: python
 dependencies:
     codeql/python-all: "*"
diff --git a/python/upgrades/CHANGELOG.md b/python/upgrades/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ## 0.0.4
diff --git a/python/upgrades/change-notes/released/0.0.6.md b/python/upgrades/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/python/upgrades/codeql-pack.release.yml b/python/upgrades/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/python/upgrades/qlpack.yml b/python/upgrades/qlpack.yml
@@ -2,4 +2,4 @@ name: codeql/python-upgrades
 groups: python
 upgrades: .
 library: true
-version: 0.0.6-dev
+version: 0.0.6
diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md
@@ -1,3 +1,9 @@
+## 0.0.6
+
+### Deprecated APIs
+
+* `ConstantWriteAccess.getQualifiedName()` has been deprecated in favor of `getAQualifiedName()` which can return multiple possible qualified names for a given constant write access.
+
 ## 0.0.5
 
 ### New Features
diff --git a/ruby/ql/lib/change-notes/released/0.0.6.md b/ruby/ql/lib/change-notes/released/0.0.6.md
@@ -1,4 +1,5 @@
----
-category: deprecated
----
+## 0.0.6
+
+### Deprecated APIs
+
 * `ConstantWriteAccess.getQualifiedName()` has been deprecated in favor of `getAQualifiedName()` which can return multiple possible qualified names for a given constant write access.
diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/ruby-all
-version: 0.0.6-dev
+version: 0.0.6
 groups: ruby
 extractor: ruby
 dbscheme: ruby.dbscheme
diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.6
+
 ## 0.0.5
 
 ## 0.0.4
diff --git a/ruby/ql/src/change-notes/released/0.0.6.md b/ruby/ql/src/change-notes/released/0.0.6.md
@@ -0,0 +1 @@
+## 0.0.6
diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.5
+lastReleaseVersion: 0.0.6
diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/ruby-queries
-version: 0.0.6-dev
+version: 0.0.6
 groups: ruby
 suites: codeql-suites
 defaultSuiteFile: codeql-suites/ruby-code-scanning.qls

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`---`
`2`		`-lastReleaseVersion: 0.0.5`
	`2`	`+lastReleaseVersion: 0.0.6`