Skip to content

v0.7.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 26 Aug 13:43
v0.7.6
8414528
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Publish summary

Generated by publish.yml run #179 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.

Language Queries (src) Library (lib) Extensions (ext) Library sources (ext-library-sources)
C++ codeql-cpp-queries 0.7.6 downloads 🆕 codeql-cpp-libs 0.7.6 downloads 🆕 n/a n/a
C# codeql-csharp-queries 0.7.6 downloads 🆕 codeql-csharp-libs 0.7.6 downloads 🆕 codeql-csharp-extensions 0.7.6 downloads 🆕 codeql-csharp-library-sources 0.7.6 downloads 🆕
Go codeql-go-queries 0.7.6 downloads 🆕 codeql-go-libs 0.7.6 downloads 🆕 codeql-go-extensions 0.7.6 downloads 🆕 n/a
Java codeql-java-queries 0.7.6 downloads 🆕 codeql-java-libs 0.7.6 downloads 🆕 codeql-java-extensions 0.7.6 downloads 🆕 codeql-java-library-sources 0.7.6 downloads 🆕
JavaScript codeql-javascript-queries 0.7.6 downloads 🆕 codeql-javascript-libs 0.7.6 downloads 🆕 n/a n/a
Python codeql-python-queries 0.7.6 downloads 🆕 codeql-python-libs 0.7.6 downloads 🆕 codeql-python-extensions 0.7.6 downloads 🆕 n/a
Ruby codeql-ruby-queries 0.7.6 downloads 🆕 codeql-ruby-libs 0.7.6 downloads 🆕 n/a n/a

What's Changed

  • Trim whitespace from codeql_version input in update-codeql-version workflow by @felickz with @Copilot in #220
  • chore: bump pinned CodeQL CLI to v2.26.3 by @security-lab-bot[bot] in #223
  • Add Java heuristic insecure randomness query by @WritingPanda in #222
  • deps: bump dorny/paths-filter from 4.0.2 to 4.0.3 in the production-dependencies group by @dependabot[bot] in #221
  • Chore: Auto Update new Release by @security-lab-bot[bot] in #224

New Contributors

Full Changelog: v0.7.5...v0.7.6

CodeQL standard library & query pack versions

Pinned CodeQL CLI/library version (.codeqlversion): v2.26.3

Comparing each language's direct codeql/* dependencies (from both src/qlpack.yml and lib/qlpack.yml, each resolved in its own codeql-pack.lock.yml) against the versions github/codeql itself ships for CLI v2.26.3 (tag codeql-cli/v2.26.3). src and lib are checked independently because they're separately-resolved lock files that can drift from each other. Each cell links to the exact file/line backing it - our side at the commit this table was generated from, upstream at the CLI tag - so the claim can be verified with one click. A mismatch means codeql pack upgrade <lang>/<pack> hasn't been run for that specific directory since the last .codeqlversion bump - see CONTRIBUTING.md: Updating the pinned CodeQL CLI/library version.

Language Pack Dependency Our locked version Upstream (CLI v2.26.3 ships) Status
C++ src codeql/cpp-all 12.0.2 12.0.2 ✅
C++ src codeql/cpp-queries 1.8.1 1.8.1 ✅
C++ lib codeql/cpp-all 12.0.2 12.0.2 ✅
C# src codeql/csharp-all 7.1.2 7.1.2 ✅
C# src codeql/csharp-queries 1.9.1 1.9.1 ✅
C# lib codeql/csharp-all 7.1.2 7.1.2 ✅
Go src codeql/go-all 7.2.3 7.2.3 ✅
Go lib codeql/go-all 7.2.3 7.2.3 ✅
Java src codeql/java-all 9.2.3 9.2.3 ✅
Java lib codeql/java-all 9.2.3 9.2.3 ✅
JavaScript src codeql/javascript-all 2.9.0 2.9.0 ✅
JavaScript lib codeql/javascript-all 2.9.0 2.9.0 ✅
Python src codeql/python-all 7.2.3 7.2.3 ✅
Python lib codeql/python-all 7.2.3 7.2.3 ✅
Ruby src codeql/ruby-all 6.0.3 6.0.3 ✅
Ruby lib codeql/ruby-all 6.0.3 6.0.3 ✅

Contributors

felickz, WritingPanda, and dependabot
Assets 2
Loading