v0.2.2

Note

All 18 published packages are now synced to 0.2.2. Pinned CodeQL CLI/library version (.codeqlversion): v2.21.1. n/a means that pack doesn't exist for this language (only C# and Java publish ext/ext-library-sources today).

Progress toward v0.2.2

Language	Queries (src)	Library (lib)	Extensions (ext)	Library sources (ext-library-sources)
C++	0.2.2	0.2.2	n/a	n/a
C#	0.2.2	0.2.2	0.2.2	0.2.2
Go	0.2.2	0.2.2	n/a	n/a
Java	0.2.2 **	0.2.2	0.2.2	0.2.2
JavaScript	0.2.2	0.2.2	n/a	n/a
Python	0.2.2	0.2.2	n/a	n/a
Ruby	0.2.2	0.2.2	n/a	n/a

** NOTE: codeql-java-queries v0.2.2 was published in August 25 - so much of the changelog below does not apply to this release - will be synced up in v0.2.3

18 of 18 published packages are on 0.2.2. All republished automatically by publish.yml after #158 merged to main; codeql-java-queries was already at 0.2.2 and was correctly skipped as a no-op (confirms the publish workflow's version-diff check is idempotent). See CONTRIBUTING.md: Releases & publishing for how a version bump triggers a republish.

What's Changed

• deps: bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 in the production-dependencies group by @dependabot[bot] in #108
• deps: bump 42ByteLabs/patch-release-me from 0.4.1 to 0.5.3 in the production-dependencies group by @dependabot[bot] in #109
• deps: bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 in the production-dependencies group by @dependabot[bot] in #110
• deps: bump actions/create-github-app-token from 1 to 2 in the production-dependencies group by @dependabot[bot] in #111
• deps: bump 42ByteLabs/patch-release-me from 0.5.3 to 0.5.4 in the production-dependencies group by @dependabot[bot] in #112
• docs: Update README by @GeekMasher in #104
• Python: Add generated and manual models by @GeekMasher in #113
• Java: Debugging queries by @GeekMasher in #114
• JS: debugging queries by @GeekMasher in #115
• Python: Debugging queries by @GeekMasher in #119
• Go: Debugging queries by @GeekMasher in #120
• deps: bump 42ByteLabs/patch-release-me from 0.5.4 to 0.5.5 in the production-dependencies group by @dependabot[bot] in #122
• Feat: Add support for .codeqlversion by @GeekMasher in #117
• deps: bump 42ByteLabs/patch-release-me from 0.5.5 to 0.6.0 in the production-dependencies group by @dependabot[bot] in #128
• Remove "Change notes" section by @kevinbackhouse in #127
• Update synthetics config to exclude test dir by @GeekMasher in #131
• Java: remove SpringBootActuators query by @jcogs33 in #123
• deps: bump 42ByteLabs/patch-release-me from 0.6.0 to 0.6.1 in the production-dependencies group by @dependabot[bot] in #133
• Update synthetics.yml to remove WP 1P content by @felickz in #132
• Update dependencies to packs shipped with 2.21.1 by @jcogs33 in #124
• Add CodeQL quality configuration file for enhanced code quality analysis by @felickz in #136
• Java: Remove the query githubsecuritylab/java/insecure-spring-actuator-config. by @michaelnebel in #138
• deps: bump the production-dependencies group with 2 updates by @dependabot[bot] in #137
• deps: bump the production-dependencies group across 1 directory with 6 updates by @dependabot[bot] in #143
• Fix indentation for 'pack' and 'extensible' fields in model YAML files by @felickz in #146
• deps: bump the production-dependencies group across 1 directory with 8 updates by @dependabot[bot] in #150
• deps: bump dorny/paths-filter from 4.0.1 to 4.0.2 in the production-dependencies group by @dependabot[bot] in #152
• Add Java security queries: cleartext LDAP, insecure JDBC cert, credentials in URL, IDOR by @felickz in #151
• docs: document CodeQL version pinning and pack compatibility by @felickz in #154
• security: adopt supply chain security defaults by @felickz in #153
• docs: clarify how release/publish process works today by @felickz in #157
• Sync all packs to 0.2.2 and make .release.yml the version source of truth by @felickz in #158

New Contributors

• @kevinbackhouse made their first contribution in #127
• @jcogs33 made their first contribution in #123

Full Changelog: v0.2.1...v0.2.2

Publish summary

Generated by publish.yml run #153 — 🆕 marks a package republished by this run.

Language	Queries (src)	Library (lib)	Extensions (ext)	Library sources (ext-library-sources)
C++	0.2.2	0.2.2	n/a	n/a
C#	0.2.2	0.2.2	0.2.2	0.2.2
Go	0.2.2	0.2.2	n/a	n/a
Java	0.2.2	0.2.2	0.2.2	0.2.2
JavaScript	0.2.2	0.2.2	n/a	n/a
Python	0.2.2	0.2.2	n/a	n/a
Ruby	0.2.2	0.2.2	n/a	n/a