Skip to content

v0.7.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Aug 20:20
v0.7.2
ee16cf9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Publish summary

Generated by publish.yml run #175 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.

Language Queries (src) Library (lib) Extensions (ext) Library sources (ext-library-sources)
C++ codeql-cpp-queries 0.7.2 downloads 🆕 codeql-cpp-libs 0.7.2 downloads 🆕 n/a n/a
C# codeql-csharp-queries 0.7.2 downloads 🆕 codeql-csharp-libs 0.7.2 downloads 🆕 codeql-csharp-extensions 0.7.2 downloads 🆕 codeql-csharp-library-sources 0.7.2 downloads 🆕
Go codeql-go-queries 0.7.2 downloads 🆕 codeql-go-libs 0.7.2 downloads 🆕 codeql-go-extensions 0.7.2 downloads 🆕 ❓ no result
Java codeql-java-queries 0.7.2 downloads 🆕 codeql-java-libs 0.7.2 downloads 🆕 codeql-java-extensions 0.7.2 downloads 🆕 codeql-java-library-sources 0.7.2 downloads 🆕
JavaScript codeql-javascript-queries 0.7.2 downloads 🆕 codeql-javascript-libs 0.7.2 downloads 🆕 n/a n/a
Python codeql-python-queries 0.7.2 downloads 🆕 codeql-python-libs 0.7.2 downloads 🆕 codeql-python-extensions 0.7.2 downloads 🆕 ❓ no result
Ruby codeql-ruby-queries 0.7.2 downloads 🆕 codeql-ruby-libs 0.7.2 downloads 🆕 n/a n/a

What's Changed

  • Add Go/Python new extensions to synthetics configuration by @felickz in #194
  • [WIP] Fix failing GitHub Actions job 'configs' by @felickz with @Copilot in #195
  • Fix publish summary rendering "❓ no result" for every package by @felickz with @Copilot in #196
  • Add Java CWE-089 SQL injection audit query (partial flow, any source) by @felickz with @Copilot in #198
  • ci: target compile/test to touched .ql files, fix silent test-step stderr by @felickz in #199
  • Java: model Spring R2DBC DatabaseClient and io.r2dbc.spi as SQL injection sinks by @felickz in #204
  • Chore: Auto Update new Release by @security-lab-bot[bot] in #207

Full Changelog: v0.7.1...v0.7.2

CodeQL standard library & query pack versions

Pinned CodeQL CLI/library version (.codeqlversion): v2.26.1

Comparing each language's direct codeql/* dependencies (from both src/qlpack.yml and lib/qlpack.yml, each resolved in its own codeql-pack.lock.yml) against the versions github/codeql itself ships for CLI v2.26.1 (tag codeql-cli/v2.26.1). src and lib are checked independently because they're separately-resolved lock files that can drift from each other. Each cell links to the exact file/line backing it - our side at the commit this table was generated from, upstream at the CLI tag - so the claim can be verified with one click. A mismatch means codeql pack upgrade <lang>/<pack> hasn't been run for that specific directory since the last .codeqlversion bump - see CONTRIBUTING.md: Updating the pinned CodeQL CLI/library version.

Language Pack Dependency Our locked version Upstream (CLI v2.26.1 ships) Status
C++ src codeql/cpp-all 12.0.0 12.0.0 ✅
C++ src codeql/cpp-queries 1.7.0 1.7.0 ✅
C++ lib codeql/cpp-all 12.0.0 12.0.0 ✅
C# src codeql/csharp-all 7.1.0 7.1.0 ✅
C# src codeql/csharp-queries 1.8.0 1.8.0 ✅
C# lib codeql/csharp-all 7.1.0 7.1.0 ✅
Go src codeql/go-all 7.2.1 7.2.1 ✅
Go lib codeql/go-all 7.2.1 7.2.1 ✅
Java src codeql/java-all 9.2.1 9.2.1 ✅
Java lib codeql/java-all 9.2.1 9.2.1 ✅
JavaScript src codeql/javascript-all 2.8.1 2.8.1 ✅
JavaScript lib codeql/javascript-all 2.8.1 2.8.1 ✅
Python src codeql/python-all 7.2.1 7.2.1 ✅
Python lib codeql/python-all 7.2.1 7.2.1 ✅
Ruby src codeql/ruby-all 6.0.1 6.0.1 ✅
Ruby lib codeql/ruby-all 6.0.1 6.0.1 ✅

Contributors

felickz
Assets 2
Loading