Skip to content

v0.8.1

Latest

Choose a tag to compare

@github-actions github-actions released this 28 Sep 15:03
d5eeab9

Publish summary

Generated by publish.yml run #182 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.

Language Queries (src) Library (lib) Extensions (ext) Library sources (ext-library-sources)
C++ codeql-cpp-queries 0.8.1 downloads 🆕 codeql-cpp-libs 0.8.1 downloads 🆕 n/a n/a
C# codeql-csharp-queries 0.8.1 downloads 🆕 codeql-csharp-libs 0.8.1 downloads 🆕 codeql-csharp-extensions 0.8.1 downloads 🆕 codeql-csharp-library-sources 0.8.1 downloads 🆕
Go codeql-go-queries 0.8.1 downloads 🆕 codeql-go-libs 0.8.1 downloads 🆕 codeql-go-extensions 0.8.1 downloads 🆕 n/a
Java codeql-java-queries 0.8.1 downloads 🆕 codeql-java-libs 0.8.1 downloads 🆕 codeql-java-extensions 0.8.1 downloads 🆕 codeql-java-library-sources 0.8.1 downloads 🆕
JavaScript codeql-javascript-queries 0.8.1 downloads 🆕 codeql-javascript-libs 0.8.1 downloads 🆕 n/a n/a
Python codeql-python-queries 0.8.1 downloads 🆕 codeql-python-libs 0.8.1 downloads 🆕 codeql-python-extensions 0.8.1 downloads 🆕 n/a
Ruby codeql-ruby-queries 0.8.1 downloads 🆕 codeql-ruby-libs 0.8.1 downloads 🆕 n/a n/a

What's Changed

  • chore(deps): bump soupsieve from 2.8.4 to 2.9 in /ql/hotspots by @dependabot[bot] in #230
  • ci: add build/validate-only CI workflow for ql/hotspots by @felickz with @Copilot in #231
  • chore: bump pinned CodeQL CLI to v2.27.1 and release v0.8.1 by @security-lab-bot[bot] in #232

Full Changelog: v0.8.0...v0.8.1

CodeQL standard library & query pack versions

Pinned CodeQL CLI/library version (.codeqlversion): v2.27.1

Comparing each language's direct codeql/* dependencies (from both src/qlpack.yml and lib/qlpack.yml, each resolved in its own codeql-pack.lock.yml) against the versions github/codeql itself ships for CLI v2.27.1 (tag codeql-cli/v2.27.1). src and lib are checked independently because they're separately-resolved lock files that can drift from each other. Each cell links to the exact file/line backing it - our side at the commit this table was generated from, upstream at the CLI tag - so the claim can be verified with one click. A mismatch means codeql pack upgrade <lang>/<pack> hasn't been run for that specific directory since the last .codeqlversion bump - see CONTRIBUTING.md: Updating the pinned CodeQL CLI/library version.

Language Pack Dependency Our locked version Upstream (CLI v2.27.1 ships) Status
C++ src codeql/cpp-all 12.1.1 12.1.1 ✅
C++ src codeql/cpp-queries 1.9.0 1.9.0 ✅
C++ lib codeql/cpp-all 12.1.1 12.1.1 ✅
C# src codeql/csharp-all 7.3.1 7.3.1 ✅
C# src codeql/csharp-queries 1.10.0 1.10.0 ✅
C# lib codeql/csharp-all 7.3.1 7.3.1 ✅
Go src codeql/go-all 7.3.2 7.3.2 ✅
Go lib codeql/go-all 7.3.2 7.3.2 ✅
Java src codeql/java-all 9.3.1 9.3.1 ✅
Java lib codeql/java-all 9.3.1 9.3.1 ✅
JavaScript src codeql/javascript-all 2.10.2 2.10.2 ✅
JavaScript lib codeql/javascript-all 2.10.2 2.10.2 ✅
Python src codeql/python-all 7.2.6 7.2.6 ✅
Python lib codeql/python-all 7.2.6 7.2.6 ✅
Ruby src codeql/ruby-all 7.0.1 7.0.1 ✅
Ruby lib codeql/ruby-all 7.0.1 7.0.1 ✅