Skip to content

v0.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Jul 17:09
v0.7.0
3952198
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Publish summary

Generated by publish.yml run #173 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.

Language Queries (src) Library (lib) Extensions (ext) Library sources (ext-library-sources)
C++ codeql-cpp-queries 0.7.0 downloads 🆕 codeql-cpp-libs 0.7.0 downloads 🆕 n/a n/a
C# codeql-csharp-queries 0.7.0 downloads 🆕 codeql-csharp-libs 0.7.0 downloads 🆕 codeql-csharp-extensions 0.7.0 downloads 🆕 codeql-csharp-library-sources 0.7.0 downloads 🆕
Go codeql-go-queries 0.7.0 downloads 🆕 codeql-go-libs 0.7.0 downloads 🆕 n/a n/a
Java codeql-java-queries 0.7.0 downloads 🆕 codeql-java-libs 0.7.0 downloads 🆕 codeql-java-extensions 0.7.0 downloads 🆕 codeql-java-library-sources 0.7.0 downloads 🆕
JavaScript codeql-javascript-queries 0.7.0 downloads 🆕 codeql-javascript-libs 0.7.0 downloads 🆕 n/a n/a
Python codeql-python-queries 0.7.0 downloads 🆕 codeql-python-libs 0.7.0 downloads 🆕 n/a n/a
Ruby codeql-ruby-queries 0.7.0 downloads 🆕 codeql-ruby-libs 0.7.0 downloads 🆕 n/a n/a

What's Changed

  • docs: add Copilot custom instructions for repo maintenance by @felickz in #187
  • deps: bump the production-dependencies group with 2 updates by @dependabot[bot] in #186
  • Publish summary: replace version links with live download-count badges by @felickz in #189
  • chore: bump pinned CodeQL CLI to v2.26.1 and release v0.7.0 by @security-lab-bot[bot] in #188

Full Changelog: v0.6.0...v0.7.0

CodeQL standard library & query pack versions

Pinned CodeQL CLI/library version (.codeqlversion): v2.26.1

Comparing each language's direct codeql/* dependencies (from both src/qlpack.yml and lib/qlpack.yml, each resolved in its own codeql-pack.lock.yml) against the versions github/codeql itself ships for CLI v2.26.1 (tag codeql-cli/v2.26.1). src and lib are checked independently because they're separately-resolved lock files that can drift from each other. Each cell links to the exact file/line backing it - our side at the commit this table was generated from, upstream at the CLI tag - so the claim can be verified with one click. A mismatch means codeql pack upgrade <lang>/<pack> hasn't been run for that specific directory since the last .codeqlversion bump - see CONTRIBUTING.md: Updating the pinned CodeQL CLI/library version.

Language Pack Dependency Our locked version Upstream (CLI v2.26.1 ships) Status
C++ src codeql/cpp-all 12.0.0 12.0.0 ✅
C++ src codeql/cpp-queries 1.7.0 1.7.0 ✅
C++ lib codeql/cpp-all 12.0.0 12.0.0 ✅
C# src codeql/csharp-all 7.1.0 7.1.0 ✅
C# src codeql/csharp-queries 1.8.0 1.8.0 ✅
C# lib codeql/csharp-all 7.1.0 7.1.0 ✅
Go src codeql/go-all 7.2.1 7.2.1 ✅
Go lib codeql/go-all 7.2.1 7.2.1 ✅
Java src codeql/java-all 9.2.1 9.2.1 ✅
Java lib codeql/java-all 9.2.1 9.2.1 ✅
JavaScript src codeql/javascript-all 2.8.1 2.8.1 ✅
JavaScript lib codeql/javascript-all 2.8.1 2.8.1 ✅
Python src codeql/python-all 7.2.1 7.2.1 ✅
Python lib codeql/python-all 7.2.1 7.2.1 ✅
Ruby src codeql/ruby-all 6.0.1 6.0.1 ✅
Ruby lib codeql/ruby-all 6.0.1 6.0.1 ✅

Contributors

felickz and dependabot
Assets 2
Loading