github · aibaars · Oct 18, 2024 · Oct 18, 2024
@@ -1,10 +1,3 @@
-## 2.0.2
-
-### Minor Analysis Improvements
-
-* Added taint flow model for `fopen` and related functions.
-* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.
-
 ## 2.0.1
 
 No user-facing changes.

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The `SimpleRangeAnalysis` library (`semmle.code.cpp.rangeanalysis.SimpleRangeAnalysis`) now generates more precise ranges for calls to `fgetc` and `getc`.
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Added taint flow model for `fopen` and related functions.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.0.2
+lastReleaseVersion: 2.0.1
@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 2.0.2
+version: 2.0.2-dev
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

@@ -1,12 +1,3 @@
-## 1.2.5
-
-### Minor Analysis Improvements
-
-* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives and increase true positives.
-* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.
-* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
-* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.
-
 ## 1.2.4
 
 ### Minor Analysis Improvements

@@ -0,0 +1,5 @@
+---
+category: minorAnalysis
+---
+* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to detect byte arrays.
+* The `cpp/incorrect-string-type-conversion` query now produces fewer false positives caused by failure to recognize dynamic checks prior to possible dangerous widening.
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Fixed false positives in the `cpp/uninitialized-local` ("Potentially uninitialized local variable") query if there are extraction errors in the function.
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The `cpp/unclear-array-index-validation` ("Unclear validation of array index") query has been improved to reduce false positives increase true positives.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.2.5
+lastReleaseVersion: 1.2.4
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 1.2.5
+version: 1.2.5-dev
 groups:
   - cpp
   - queries

@@ -1,7 +1,3 @@
-## 1.7.27
-
-No user-facing changes.
-
 ## 1.7.26
 
 No user-facing changes.

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.27
+lastReleaseVersion: 1.7.26
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.7.27
+version: 1.7.27-dev
 groups:
   - csharp
   - solorigate

@@ -1,7 +1,3 @@
-## 1.7.27
-
-No user-facing changes.
-
 ## 1.7.26
 
 No user-facing changes.

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.27
+lastReleaseVersion: 1.7.26
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.7.27
+version: 1.7.27-dev
 groups:
   - csharp
   - solorigate

@@ -1,7 +1,3 @@
-## 3.0.1
-
-No user-facing changes.
-
 ## 3.0.0
 
 ### Breaking Changes

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 3.0.1
+lastReleaseVersion: 3.0.0
@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 3.0.1
+version: 3.0.1-dev
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

@@ -1,7 +1,3 @@
-## 1.0.10
-
-No user-facing changes.
-
 ## 1.0.9
 
 ### Minor Analysis Improvements

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.10
+lastReleaseVersion: 1.0.9
@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 1.0.10
+version: 1.0.10-dev
 groups:
   - csharp
   - queries

@@ -1,7 +1,3 @@
-## 1.0.10
-
-No user-facing changes.
-
 ## 1.0.9
 
 No user-facing changes.

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.10
+lastReleaseVersion: 1.0.9
@@ -1,5 +1,5 @@
 name: codeql-go-consistency-queries
-version: 1.0.10
+version: 1.0.10-dev
 groups:
   - go
   - queries

@@ -1,11 +1,3 @@
-## 2.1.1
-
-### Minor Analysis Improvements
-
-* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
-* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
-* Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models).
-
 ## 2.1.0
 
 ### Deprecated APIs

@@ -1,7 +1,4 @@
-## 2.1.1
-
-### Minor Analysis Improvements
-
-* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
-* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
+---
+category: minorAnalysis
+---
 * Local source models with the `stdin` source kind have been added for the variable `os.Stdin` and the functions `fmt.Scan`, `fmt.Scanf` and `fmt.Scanln`. You can optionally include threat models as appropriate when using the CodeQL CLI and in GitHub code scanning. For more information, see [Analyzing your code with CodeQL queries](https://docs.github.com/code-security/codeql-cli/getting-started-with-the-codeql-cli/analyzing-your-code-with-codeql-queries#including-model-packs-to-add-potential-sources-of-tainted-data>) and [Customizing your advanced setup for code scanning](https://docs.github.com/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning#extending-codeql-coverage-with-threat-models).
@@ -0,0 +1,5 @@
+---
+category: minorAnalysis
+---
+* Added member predicates `StructTag.hasOwnFieldWithTag` and `Field.getTag`, which enable CodeQL queries to examine struct field tags.
+* Added member predicate `InterfaceType.hasPrivateMethodWithQualifiedName`, which enables CodeQL queries to distinguish interfaces with matching non-exported method names that are declared in different packages, and are therefore incompatible.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.1.1
+lastReleaseVersion: 2.1.0
@@ -1,5 +1,5 @@
 name: codeql/go-all
-version: 2.1.1
+version: 2.1.1-dev
 groups: go
 dbscheme: go.dbscheme
 extractor: go

@@ -1,7 +1,3 @@
-## 1.1.1
-
-No user-facing changes.
-
 ## 1.1.0
 
 ### Query Metadata Changes

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.1.1
+lastReleaseVersion: 1.1.0
@@ -1,5 +1,5 @@
 name: codeql/go-queries
-version: 1.1.1
+version: 1.1.1-dev
 groups:
   - go
   - queries

@@ -1,7 +1,3 @@
-## 1.0.10
-
-No user-facing changes.
-
 ## 1.0.9
 
 No user-facing changes.

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.10
+lastReleaseVersion: 1.0.9
@@ -1,5 +1,5 @@
 name: codeql/java-automodel-queries
-version: 1.0.10
+version: 1.0.10-dev
 groups:
     - java
     - automodel

@@ -1,7 +1,3 @@
-## 4.1.1
-
-No user-facing changes.
-
 ## 4.1.0
 
 ### Deprecated APIs

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 4.1.1
+lastReleaseVersion: 4.1.0
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 4.1.1
+version: 4.1.1-dev
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

@@ -1,7 +1,3 @@
-## 1.1.7
-
-No user-facing changes.
-
 ## 1.1.6
 
 ### Minor Analysis Improvements

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.1.7
+lastReleaseVersion: 1.1.6
@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 1.1.7
+version: 1.1.7-dev
 groups:
   - java
   - queries

@@ -1,7 +1,3 @@
-## 2.0.2
-
-No user-facing changes.
-
 ## 2.0.1
 
 No user-facing changes.

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.0.2
+lastReleaseVersion: 2.0.1
@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 2.0.2
+version: 2.0.2-dev
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript

@@ -1,7 +1,3 @@
-## 1.2.2
-
-No user-facing changes.
-
 ## 1.2.1
 
 No user-facing changes.

@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.2.2
+lastReleaseVersion: 1.2.1
@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 1.2.2
+version: 1.2.2-dev
 groups:
   - javascript
   - queries

diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md
@@ -1,7 +1,3 @@
-## 1.0.10
-
-No user-facing changes.
-
 ## 1.0.9
 
 No user-facing changes.

diff --git a/misc/suite-helpers/change-notes/released/1.0.10.md b/misc/suite-helpers/change-notes/released/1.0.10.md