Merge pull request #7975 from github/post-release-prep/codeql-cli-2.8.1

aibaars · web-flow · commit ebb87c4b365a · 2022-02-15T20:17:35.000+01:00
Post-release preparation for codeql-cli-2.8.1
diff --git a/cpp/ql/lib/CHANGELOG.md b/cpp/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.9
+
 ## 0.0.8
 
 ### Deprecated APIs
diff --git a/cpp/ql/lib/change-notes/2022-02-02-detect-creat-in-openat.md b/cpp/ql/lib/change-notes/2022-02-02-detect-creat-in-openat.md
diff --git a/cpp/ql/lib/change-notes/released/0.0.9.md b/cpp/ql/lib/change-notes/released/0.0.9.md
@@ -0,0 +1,2 @@
+## 0.0.9
+
diff --git a/cpp/ql/lib/codeql-pack.release.yml b/cpp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/cpp/ql/lib/qlpack.yml b/cpp/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 0.0.9-dev
+version: 0.0.10-dev
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp
diff --git a/cpp/ql/src/CHANGELOG.md b/cpp/ql/src/CHANGELOG.md
@@ -1,3 +1,17 @@
+## 0.0.9
+
+### New Queries
+
+* Added a new query, `cpp/open-call-with-mode-argument`, to detect when `open` or `openat` is called with the `O_CREAT` or `O_TMPFILE` flag but when the `mode` argument is omitted.
+
+### Minor Analysis Improvements
+
+* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query has been further improved to reduce false positive results, and upgraded from `medium` to `high` precision.
+* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query now finds more results, where a password is stored in a struct field or class member variable.
+* The `cpp/cleartext-storage-file` query has been improved, removing false positives where data is written to a standard output stream.
+* The `cpp/cleartext-storage-buffer` query has been updated to use the `semmle.code.cpp.dataflow.TaintTracking` library.
+* The `cpp/world-writable-file-creation` query now only detects `open` and `openat` calls with the `O_CREAT` or `O_TMPFILE` flag.
+
 ## 0.0.8
 
 ### New Queries
diff --git a/cpp/ql/src/change-notes/2022-01-22-cleartext-transmission.md b/cpp/ql/src/change-notes/2022-01-22-cleartext-transmission.md
diff --git a/cpp/ql/src/change-notes/2022-01-25-cleartext-storage-buffer.md b/cpp/ql/src/change-notes/2022-01-25-cleartext-storage-buffer.md
diff --git a/cpp/ql/src/change-notes/2022-01-28-cleartext-storage-file.md b/cpp/ql/src/change-notes/2022-01-28-cleartext-storage-file.md
diff --git a/cpp/ql/src/change-notes/2022-02-02-detect-missing-mode-argument-for-open.md b/cpp/ql/src/change-notes/2022-02-02-detect-missing-mode-argument-for-open.md
diff --git a/cpp/ql/src/change-notes/2022-02-22-cleartext-transmission.md b/cpp/ql/src/change-notes/2022-02-22-cleartext-transmission.md
diff --git a/cpp/ql/src/change-notes/released/0.0.9.md b/cpp/ql/src/change-notes/released/0.0.9.md
@@ -0,0 +1,13 @@
+## 0.0.9
+
+### New Queries
+
+* Added a new query, `cpp/open-call-with-mode-argument`, to detect when `open` or `openat` is called with the `O_CREAT` or `O_TMPFILE` flag but when the `mode` argument is omitted.
+
+### Minor Analysis Improvements
+
+* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query has been further improved to reduce false positive results, and upgraded from `medium` to `high` precision.
+* The "Cleartext transmission of sensitive information" (`cpp/cleartext-transmission`) query now finds more results, where a password is stored in a struct field or class member variable.
+* The `cpp/cleartext-storage-file` query has been improved, removing false positives where data is written to a standard output stream.
+* The `cpp/cleartext-storage-buffer` query has been updated to use the `semmle.code.cpp.dataflow.TaintTracking` library.
+* The `cpp/world-writable-file-creation` query now only detects `open` and `openat` calls with the `O_CREAT` or `O_TMPFILE` flag.
diff --git a/cpp/ql/src/codeql-pack.release.yml b/cpp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/cpp/ql/src/qlpack.yml b/cpp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 0.0.9-dev
+version: 0.0.10-dev
 groups: 
   - cpp
   - queries
diff --git a/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 1.0.3
+
 ## 1.0.2
 
 ## 1.0.0
diff --git a/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.0.3.md b/csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.0.3.md
@@ -0,0 +1 @@
+## 1.0.3
diff --git a/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.2
+lastReleaseVersion: 1.0.3
diff --git a/csharp/ql/campaigns/Solorigate/lib/qlpack.yml b/csharp/ql/campaigns/Solorigate/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.0.3-dev
+version: 1.0.4-dev
 groups:
     - csharp
     - solorigate
diff --git a/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md b/csharp/ql/campaigns/Solorigate/src/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 1.0.3
+
 ## 1.0.2
 
 ## 1.0.0
diff --git a/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.0.3.md b/csharp/ql/campaigns/Solorigate/src/change-notes/released/1.0.3.md
@@ -0,0 +1 @@
+## 1.0.3
diff --git a/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml b/csharp/ql/campaigns/Solorigate/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.2
+lastReleaseVersion: 1.0.3
diff --git a/csharp/ql/campaigns/Solorigate/src/qlpack.yml b/csharp/ql/campaigns/Solorigate/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.0.3-dev
+version: 1.0.4-dev
 groups:
     - csharp
     - solorigate
diff --git a/csharp/ql/lib/CHANGELOG.md b/csharp/ql/lib/CHANGELOG.md
@@ -1,3 +1,14 @@
+## 0.0.9
+
+### Major Analysis Improvements
+
+* Added support for C# 10 lambda improvements
+  * Explicit return types on lambda expressions.
+  * Lambda expression can be tagged with method and return value attributes.
+* Added support for C# 10 [Extended property patterns](https://docs.microsoft.com/en-us/dotnet/csharp/whats-new/csharp-10#extended-property-patterns).
+* Return value attributes are extracted.
+* The QL `Attribute` class now has subclasses for each kind of attribute.
+
 ## 0.0.8
 
 ### Deprecated APIs
diff --git a/csharp/ql/lib/change-notes/2021-02-02-return-value-attributes.md b/csharp/ql/lib/change-notes/2021-02-02-return-value-attributes.md
diff --git a/csharp/ql/lib/change-notes/2022-01-25-extended-property-patterns.md b/csharp/ql/lib/change-notes/2022-01-25-extended-property-patterns.md
diff --git a/csharp/ql/lib/change-notes/2022-02-07-lambda-improvements.md b/csharp/ql/lib/change-notes/2022-02-07-lambda-improvements.md
diff --git a/csharp/ql/lib/change-notes/released/0.0.9.md b/csharp/ql/lib/change-notes/released/0.0.9.md
@@ -0,0 +1,10 @@
+## 0.0.9
+
+### Major Analysis Improvements
+
+Added support for C# 10 lambda improvements
+* Explicit return types on lambda expressions.
+* Lambda expression can be tagged with method and return value attributes.
+* Added support for C# 10 [Extended property patterns](https://docs.microsoft.com/en-us/dotnet/csharp/whats-new/csharp-10#extended-property-patterns).
+* Return value attributes are extracted.
+* The QL `Attribute` class now has subclasses for each kind of attribute.
diff --git a/csharp/ql/lib/codeql-pack.release.yml b/csharp/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/csharp/ql/lib/qlpack.yml b/csharp/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 0.0.9-dev
+version: 0.0.10-dev
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp
diff --git a/csharp/ql/src/CHANGELOG.md b/csharp/ql/src/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.9
+
 ## 0.0.8
 
 ## 0.0.7
diff --git a/csharp/ql/src/change-notes/released/0.0.9.md b/csharp/ql/src/change-notes/released/0.0.9.md
@@ -0,0 +1 @@
+## 0.0.9
diff --git a/csharp/ql/src/codeql-pack.release.yml b/csharp/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/csharp/ql/src/qlpack.yml b/csharp/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 0.0.9-dev
+version: 0.0.10-dev
 groups: 
   - csharp
   - queries
diff --git a/java/ql/lib/CHANGELOG.md b/java/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.9
+
 ## 0.0.8
 
 ### Deprecated APIs
diff --git a/java/ql/lib/change-notes/released/0.0.9.md b/java/ql/lib/change-notes/released/0.0.9.md
@@ -0,0 +1 @@
+## 0.0.9
diff --git a/java/ql/lib/codeql-pack.release.yml b/java/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/java/ql/lib/qlpack.yml b/java/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 0.0.9-dev
+version: 0.0.10-dev
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java
diff --git a/java/ql/src/CHANGELOG.md b/java/ql/src/CHANGELOG.md
@@ -1,3 +1,9 @@
+## 0.0.9
+
+### New Queries
+
+* A new query "Cleartext storage of sensitive information using a local database on Android" (`java/android/cleartext-storage-database`) has been added. This query finds instances of sensitive data being stored in local databases without encryption, which may expose it to attackers or malicious applications.
+
 ## 0.0.8
 
 ### New Queries
diff --git a/java/ql/src/change-notes/released/0.0.9.md b/java/ql/src/change-notes/released/0.0.9.md
@@ -1,4 +1,5 @@
----
-category: newQuery
----
+## 0.0.9
+
+### New Queries
+
 * A new query "Cleartext storage of sensitive information using a local database on Android" (`java/android/cleartext-storage-database`) has been added. This query finds instances of sensitive data being stored in local databases without encryption, which may expose it to attackers or malicious applications.
diff --git a/java/ql/src/codeql-pack.release.yml b/java/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/java/ql/src/qlpack.yml b/java/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 0.0.9-dev
+version: 0.0.10-dev
 groups: 
   - java
   - queries
diff --git a/javascript/ql/lib/CHANGELOG.md b/javascript/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.10
+
 ## 0.0.9
 
 ### Deprecated APIs
diff --git a/javascript/ql/lib/change-notes/released/0.0.10.md b/javascript/ql/lib/change-notes/released/0.0.10.md
@@ -0,0 +1 @@
+## 0.0.10
diff --git a/javascript/ql/lib/codeql-pack.release.yml b/javascript/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.9
+lastReleaseVersion: 0.0.10
diff --git a/javascript/ql/lib/qlpack.yml b/javascript/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 0.0.10-dev
+version: 0.0.11-dev
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript
diff --git a/javascript/ql/src/CHANGELOG.md b/javascript/ql/src/CHANGELOG.md
@@ -1,3 +1,13 @@
+## 0.0.10
+
+### New Queries
+
+* A new query, `js/unsafe-code-construction`, has been added to the query suite, highlighting libraries that may leave clients vulnerable to arbitary code execution.
+  The query is not run by default.
+* A new query `js/file-system-race` has been added. The query detects when there is time between a file being checked and used. The query is not run by default.
+* A new query `js/jwt-missing-verification` has been added. The query detects applications that don't verify JWT tokens.
+* The `js/insecure-dependency` query has been added. It detects depedencies that are downloaded using an unencrypted connection.
+
 ## 0.0.9
 
 ### New Queries
diff --git a/javascript/ql/src/change-notes/2022-01-08-insecure-dependency-resolution.md b/javascript/ql/src/change-notes/2022-01-08-insecure-dependency-resolution.md
diff --git a/javascript/ql/src/change-notes/2022-01-25-missing-jwt-verification.md b/javascript/ql/src/change-notes/2022-01-25-missing-jwt-verification.md
diff --git a/javascript/ql/src/change-notes/2022-01-27-file-system-race.md b/javascript/ql/src/change-notes/2022-01-27-file-system-race.md
diff --git a/javascript/ql/src/change-notes/2022-02-04-unsafe-code-construction.md b/javascript/ql/src/change-notes/2022-02-04-unsafe-code-construction.md
diff --git a/javascript/ql/src/change-notes/released/0.0.10.md b/javascript/ql/src/change-notes/released/0.0.10.md
@@ -0,0 +1,9 @@
+## 0.0.10
+
+### New Queries
+
+* A new query, `js/unsafe-code-construction`, has been added to the query suite, highlighting libraries that may leave clients vulnerable to arbitary code execution.
+  The query is not run by default.
+* A new query `js/file-system-race` has been added. The query detects when there is time between a file being checked and used. The query is not run by default.
+* A new query `js/jwt-missing-verification` has been added. The query detects applications that don't verify JWT tokens.
+* The `js/insecure-dependency` query has been added. It detects depedencies that are downloaded using an unencrypted connection.
diff --git a/javascript/ql/src/codeql-pack.release.yml b/javascript/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.9
+lastReleaseVersion: 0.0.10
diff --git a/javascript/ql/src/qlpack.yml b/javascript/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 0.0.10-dev
+version: 0.0.11-dev
 groups: 
   - javascript
   - queries
diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.9
+
 ## 0.0.8
 
 ### Deprecated APIs
diff --git a/python/ql/lib/change-notes/released/0.0.9.md b/python/ql/lib/change-notes/released/0.0.9.md
@@ -0,0 +1 @@
+## 0.0.9
diff --git a/python/ql/lib/codeql-pack.release.yml b/python/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/python/ql/lib/qlpack.yml b/python/ql/lib/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/python-all
-version: 0.0.9-dev
+version: 0.0.10-dev
 groups: python
 dbscheme: semmlecode.python.dbscheme
 extractor: python
diff --git a/python/ql/src/CHANGELOG.md b/python/ql/src/CHANGELOG.md
@@ -1,3 +1,9 @@
+## 0.0.9
+
+### Bug Fixes
+
+* The [View AST functionality](https://codeql.github.com/docs/codeql-for-visual-studio-code/exploring-the-structure-of-your-source-code/) no longer prints detailed information about regular expressions, greatly improving performance.
+
 ## 0.0.8
 
 ### Major Analysis Improvements
diff --git a/python/ql/src/change-notes/released/0.0.9.md b/python/ql/src/change-notes/released/0.0.9.md
@@ -1,4 +1,5 @@
----
-category: fix
----
+## 0.0.9
+
+### Bug Fixes
+
 * The [View AST functionality](https://codeql.github.com/docs/codeql-for-visual-studio-code/exploring-the-structure-of-your-source-code/) no longer prints detailed information about regular expressions, greatly improving performance.
diff --git a/python/ql/src/codeql-pack.release.yml b/python/ql/src/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/python/ql/src/qlpack.yml b/python/ql/src/qlpack.yml
@@ -1,5 +1,5 @@
 name: codeql/python-queries
-version: 0.0.9-dev
+version: 0.0.10-dev
 groups: 
   - python
   - queries
diff --git a/ruby/ql/lib/CHANGELOG.md b/ruby/ql/lib/CHANGELOG.md
@@ -1,3 +1,5 @@
+## 0.0.9
+
 ## 0.0.8
 
 ## 0.0.7
diff --git a/ruby/ql/lib/change-notes/released/0.0.9.md b/ruby/ql/lib/change-notes/released/0.0.9.md
@@ -0,0 +1 @@
+## 0.0.9
diff --git a/ruby/ql/lib/codeql-pack.release.yml b/ruby/ql/lib/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.0.8
+lastReleaseVersion: 0.0.9
diff --git a/ruby/ql/lib/qlpack.yml b/ruby/ql/lib/qlpack.yml
diff --git a/ruby/ql/src/CHANGELOG.md b/ruby/ql/src/CHANGELOG.md
diff --git a/ruby/ql/src/change-notes/released/0.0.9.md b/ruby/ql/src/change-notes/released/0.0.9.md
diff --git a/ruby/ql/src/codeql-pack.release.yml b/ruby/ql/src/codeql-pack.release.yml
diff --git a/ruby/ql/src/qlpack.yml b/ruby/ql/src/qlpack.yml

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`	`1`	`---`
`2`		`-lastReleaseVersion: 0.0.8`
	`2`	`+lastReleaseVersion: 0.0.9`