diff --git a/.codeqlversion b/.codeqlversion index cc6ac9cc..a5f3e61b 100644 --- a/.codeqlversion +++ b/.codeqlversion @@ -1 +1 @@ -2.26.4 +2.27.0 diff --git a/.release.yml b/.release.yml index 5eb73628..55d26fd2 100644 --- a/.release.yml +++ b/.release.yml @@ -1,6 +1,6 @@ name: "CodeQL Community Packs" repository: "githubsecuritylab/codeql-community-packs" -version: "0.7.7" +version: "0.8.0" prerelease: false ecosystem: CodeQL diff --git a/cpp/lib/codeql-pack.lock.yml b/cpp/lib/codeql-pack.lock.yml index 5829c835..36e3bd83 100644 --- a/cpp/lib/codeql-pack.lock.yml +++ b/cpp/lib/codeql-pack.lock.yml @@ -2,27 +2,27 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/cpp-all: - version: 12.0.3 + version: 12.1.0 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/quantum: - version: 0.0.34 + version: 0.0.35 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typeflow: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/cpp/lib/qlpack.yml b/cpp/lib/qlpack.yml index 51c370a2..357e6ef3 100644 --- a/cpp/lib/qlpack.yml +++ b/cpp/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-cpp-libs -version: 0.7.7 +version: 0.8.0 dependencies: - codeql/cpp-all: '12.0.3' + codeql/cpp-all: '12.1.0' diff --git a/cpp/src/codeql-pack.lock.yml b/cpp/src/codeql-pack.lock.yml index 0d62f949..b21ec87f 100644 --- a/cpp/src/codeql-pack.lock.yml +++ b/cpp/src/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/cpp-all: - version: 12.0.3 + version: 12.1.0 codeql/cpp-queries: - version: 1.8.2 + version: 1.8.3 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/quantum: - version: 0.0.34 + version: 0.0.35 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/suite-helpers: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typeflow: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/cpp/src/qlpack.yml b/cpp/src/qlpack.yml index 357f8d67..2c3f99f2 100644 --- a/cpp/src/qlpack.yml +++ b/cpp/src/qlpack.yml @@ -1,9 +1,9 @@ library: false name: githubsecuritylab/codeql-cpp-queries -version: 0.7.7 +version: 0.8.0 suites: suites defaultSuiteFile: suites/cpp.qls dependencies: - codeql/cpp-all: '12.0.3' - codeql/cpp-queries: '1.8.2' + codeql/cpp-all: '12.1.0' + codeql/cpp-queries: '1.8.3' githubsecuritylab/codeql-cpp-libs: '*' diff --git a/cpp/test/codeql-pack.lock.yml b/cpp/test/codeql-pack.lock.yml index 0d62f949..b21ec87f 100644 --- a/cpp/test/codeql-pack.lock.yml +++ b/cpp/test/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/cpp-all: - version: 12.0.3 + version: 12.1.0 codeql/cpp-queries: - version: 1.8.2 + version: 1.8.3 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/quantum: - version: 0.0.34 + version: 0.0.35 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/suite-helpers: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typeflow: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/cpp/test/qlpack.yml b/cpp/test/qlpack.yml index 4b978c86..16cf373f 100644 --- a/cpp/test/qlpack.yml +++ b/cpp/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-cpp-tests groups: [cpp, test] dependencies: - codeql/cpp-all: '12.0.3' - codeql/cpp-queries: '1.8.2' + codeql/cpp-all: '12.1.0' + codeql/cpp-queries: '1.8.3' githubsecuritylab/codeql-cpp-queries: '*' githubsecuritylab/codeql-cpp-libs: '*' extractor: cpp diff --git a/csharp/ext-library-sources/qlpack.yml b/csharp/ext-library-sources/qlpack.yml index fe92b144..bdc9ded9 100644 --- a/csharp/ext-library-sources/qlpack.yml +++ b/csharp/ext-library-sources/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-csharp-library-sources -version: 0.7.7 +version: 0.8.0 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/csharp-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/csharp/ext/qlpack.yml b/csharp/ext/qlpack.yml index 6a78f292..dd9c01e0 100644 --- a/csharp/ext/qlpack.yml +++ b/csharp/ext/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-csharp-extensions -version: 0.7.7 +version: 0.8.0 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/csharp-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/csharp/lib/codeql-pack.lock.yml b/csharp/lib/codeql-pack.lock.yml index 70e2770a..6b198d74 100644 --- a/csharp/lib/codeql-pack.lock.yml +++ b/csharp/lib/codeql-pack.lock.yml @@ -2,25 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/csharp-all: - version: 7.2.0 + version: 7.3.0 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/csharp/lib/qlpack.yml b/csharp/lib/qlpack.yml index 1ce14978..d2060968 100644 --- a/csharp/lib/qlpack.yml +++ b/csharp/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-csharp-libs -version: 0.7.7 +version: 0.8.0 dependencies: - codeql/csharp-all: "7.2.0" + codeql/csharp-all: "7.3.0" diff --git a/csharp/src/codeql-pack.lock.yml b/csharp/src/codeql-pack.lock.yml index 80f6abff..813a0789 100644 --- a/csharp/src/codeql-pack.lock.yml +++ b/csharp/src/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/csharp-all: - version: 7.2.0 + version: 7.3.0 codeql/csharp-queries: - version: 1.9.2 + version: 1.9.3 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/suite-helpers: - version: 1.0.56 + version: 1.0.57 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/csharp/src/qlpack.yml b/csharp/src/qlpack.yml index d7eb1653..634adf1e 100644 --- a/csharp/src/qlpack.yml +++ b/csharp/src/qlpack.yml @@ -1,9 +1,9 @@ library: false name: githubsecuritylab/codeql-csharp-queries -version: 0.7.7 +version: 0.8.0 suites: suites defaultSuiteFile: suites/csharp.qls dependencies: - codeql/csharp-all: "7.2.0" - codeql/csharp-queries: "1.9.2" # Required by suites/csharp-audit.qls and suites/csharp-external-api.qls for upstream cs/untrusted-data-to-external-api + codeql/csharp-all: "7.3.0" + codeql/csharp-queries: "1.9.3" # Required by suites/csharp-audit.qls and suites/csharp-external-api.qls for upstream cs/untrusted-data-to-external-api githubsecuritylab/codeql-csharp-libs: "*" diff --git a/csharp/test/codeql-pack.lock.yml b/csharp/test/codeql-pack.lock.yml index 80f6abff..813a0789 100644 --- a/csharp/test/codeql-pack.lock.yml +++ b/csharp/test/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/csharp-all: - version: 7.2.0 + version: 7.3.0 codeql/csharp-queries: - version: 1.9.2 + version: 1.9.3 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/suite-helpers: - version: 1.0.56 + version: 1.0.57 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/csharp/test/qlpack.yml b/csharp/test/qlpack.yml index db3918b9..3e28c73a 100644 --- a/csharp/test/qlpack.yml +++ b/csharp/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-csharp-tests groups: [csharp, test] dependencies: - codeql/csharp-all: "7.2.0" - codeql/csharp-queries: "1.9.2" + codeql/csharp-all: "7.3.0" + codeql/csharp-queries: "1.9.3" githubsecuritylab/codeql-csharp-extensions: "*" githubsecuritylab/codeql-csharp-library-sources: "*" githubsecuritylab/codeql-csharp-libs: "*" diff --git a/go/ext/qlpack.yml b/go/ext/qlpack.yml index 19c5d6b2..ec1e1373 100644 --- a/go/ext/qlpack.yml +++ b/go/ext/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-go-extensions -version: 0.7.7 +version: 0.8.0 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/go-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/go/lib/codeql-pack.lock.yml b/go/lib/codeql-pack.lock.yml index 2222eb35..64305304 100644 --- a/go/lib/codeql-pack.lock.yml +++ b/go/lib/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/go-all: - version: 7.3.0 + version: 7.3.1 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 compiled: false diff --git a/go/lib/qlpack.yml b/go/lib/qlpack.yml index 7f96fedb..7060b6f9 100644 --- a/go/lib/qlpack.yml +++ b/go/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-go-libs -version: 0.7.7 +version: 0.8.0 dependencies: - codeql/go-all: '7.3.0' + codeql/go-all: '7.3.1' diff --git a/go/src/codeql-pack.lock.yml b/go/src/codeql-pack.lock.yml index 2222eb35..64305304 100644 --- a/go/src/codeql-pack.lock.yml +++ b/go/src/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/go-all: - version: 7.3.0 + version: 7.3.1 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 compiled: false diff --git a/go/src/qlpack.yml b/go/src/qlpack.yml index 420fad1a..0aeeaf6f 100644 --- a/go/src/qlpack.yml +++ b/go/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-go-queries -version: 0.7.7 +version: 0.8.0 suites: suites defaultSuiteFile: suites/go.qls dependencies: - codeql/go-all: '7.3.0' + codeql/go-all: '7.3.1' githubsecuritylab/codeql-go-libs: '*' diff --git a/go/test/codeql-pack.lock.yml b/go/test/codeql-pack.lock.yml index 2222eb35..64305304 100644 --- a/go/test/codeql-pack.lock.yml +++ b/go/test/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/go-all: - version: 7.3.0 + version: 7.3.1 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 compiled: false diff --git a/go/test/qlpack.yml b/go/test/qlpack.yml index 438b082c..857476c4 100644 --- a/go/test/qlpack.yml +++ b/go/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecurtylab/codeql-go-tests groups: [go, test] dependencies: - codeql/go-all: '7.3.0' + codeql/go-all: '7.3.1' # codeql/go-queries: '*' githubsecuritylab/codeql-go-queries: '*' githubsecuritylab/codeql-go-libs: '*' diff --git a/java/ext-library-sources/qlpack.yml b/java/ext-library-sources/qlpack.yml index 9ed575ba..8d76af15 100644 --- a/java/ext-library-sources/qlpack.yml +++ b/java/ext-library-sources/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-java-library-sources -version: 0.7.7 +version: 0.8.0 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/java-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/java/ext/qlpack.yml b/java/ext/qlpack.yml index 390f2eca..0a7ae738 100644 --- a/java/ext/qlpack.yml +++ b/java/ext/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-java-extensions -version: 0.7.7 +version: 0.8.0 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/java-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/java/lib/codeql-pack.lock.yml b/java/lib/codeql-pack.lock.yml index 042277d4..457a4073 100644 --- a/java/lib/codeql-pack.lock.yml +++ b/java/lib/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/java-all: - version: 9.2.4 + version: 9.3.0 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/quantum: - version: 0.0.34 + version: 0.0.35 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typeflow: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/java/lib/qlpack.yml b/java/lib/qlpack.yml index 3af42439..b0d255e5 100644 --- a/java/lib/qlpack.yml +++ b/java/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-java-libs -version: 0.7.7 +version: 0.8.0 dependencies: - codeql/java-all: '9.2.4' + codeql/java-all: '9.3.0' diff --git a/java/src/codeql-pack.lock.yml b/java/src/codeql-pack.lock.yml index 042277d4..457a4073 100644 --- a/java/src/codeql-pack.lock.yml +++ b/java/src/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/java-all: - version: 9.2.4 + version: 9.3.0 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/quantum: - version: 0.0.34 + version: 0.0.35 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typeflow: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/java/src/qlpack.yml b/java/src/qlpack.yml index af35e98b..9b5e1242 100644 --- a/java/src/qlpack.yml +++ b/java/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-java-queries -version: 0.7.7 +version: 0.8.0 suites: suites defaultSuiteFile: suites/java.qls dependencies: - codeql/java-all: '9.2.4' + codeql/java-all: '9.3.0' githubsecuritylab/codeql-java-libs: '*' diff --git a/java/test/codeql-pack.lock.yml b/java/test/codeql-pack.lock.yml index 042277d4..457a4073 100644 --- a/java/test/codeql-pack.lock.yml +++ b/java/test/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/java-all: - version: 9.2.4 + version: 9.3.0 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/quantum: - version: 0.0.34 + version: 0.0.35 codeql/rangeanalysis: - version: 1.0.56 + version: 1.0.57 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typeflow: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/java/test/qlpack.yml b/java/test/qlpack.yml index 33b3c207..aad72554 100644 --- a/java/test/qlpack.yml +++ b/java/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecurtylab/codeql-java-tests groups: [java, test] dependencies: - codeql/java-all: '9.2.4' + codeql/java-all: '9.3.0' githubsecuritylab/codeql-java-queries: '*' githubsecuritylab/codeql-java-libs: '*' githubsecuritylab/codeql-java-library-sources: '*' diff --git a/javascript/lib/codeql-pack.lock.yml b/javascript/lib/codeql-pack.lock.yml index 32ea1335..b184923e 100644 --- a/javascript/lib/codeql-pack.lock.yml +++ b/javascript/lib/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/javascript-all: - version: 2.10.0 + version: 2.10.1 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 codeql/yaml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/javascript/lib/qlpack.yml b/javascript/lib/qlpack.yml index 851e20cb..c17857b3 100644 --- a/javascript/lib/qlpack.yml +++ b/javascript/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-javascript-libs -version: 0.7.7 +version: 0.8.0 dependencies: - codeql/javascript-all: '2.10.0' + codeql/javascript-all: '2.10.1' diff --git a/javascript/src/codeql-pack.lock.yml b/javascript/src/codeql-pack.lock.yml index 32ea1335..b184923e 100644 --- a/javascript/src/codeql-pack.lock.yml +++ b/javascript/src/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/javascript-all: - version: 2.10.0 + version: 2.10.1 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 codeql/yaml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/javascript/src/qlpack.yml b/javascript/src/qlpack.yml index 31650426..993ef337 100644 --- a/javascript/src/qlpack.yml +++ b/javascript/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-javascript-queries -version: 0.7.7 +version: 0.8.0 suites: suites defaultSuiteFile: suites/javascript.qls dependencies: - codeql/javascript-all: '2.10.0' + codeql/javascript-all: '2.10.1' githubsecuritylab/codeql-javascript-libs: '*' diff --git a/javascript/test/codeql-pack.lock.yml b/javascript/test/codeql-pack.lock.yml index 32ea1335..b184923e 100644 --- a/javascript/test/codeql-pack.lock.yml +++ b/javascript/test/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/javascript-all: - version: 2.10.0 + version: 2.10.1 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 codeql/yaml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/javascript/test/qlpack.yml b/javascript/test/qlpack.yml index 3fc26ca0..55106fe0 100644 --- a/javascript/test/qlpack.yml +++ b/javascript/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecuritylab/codeql-javascript-tests groups: [javascript, test] dependencies: - codeql/javascript-all: "2.10.0" + codeql/javascript-all: "2.10.1" githubsecuritylab/codeql-javascript-queries: "*" extractor: javascript diff --git a/python/ext/qlpack.yml b/python/ext/qlpack.yml index 688d98c4..8870dc8c 100644 --- a/python/ext/qlpack.yml +++ b/python/ext/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-python-extensions -version: 0.7.7 +version: 0.8.0 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/python-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/python/lib/codeql-pack.lock.yml b/python/lib/codeql-pack.lock.yml index b31e5328..e8d0d477 100644 --- a/python/lib/codeql-pack.lock.yml +++ b/python/lib/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/python-all: - version: 7.2.4 + version: 7.2.5 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 codeql/yaml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/python/lib/qlpack.yml b/python/lib/qlpack.yml index 47a2880b..1d6ec2c7 100644 --- a/python/lib/qlpack.yml +++ b/python/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-python-libs -version: 0.7.7 +version: 0.8.0 dependencies: - codeql/python-all: '7.2.4' + codeql/python-all: '7.2.5' diff --git a/python/src/codeql-pack.lock.yml b/python/src/codeql-pack.lock.yml index b31e5328..e8d0d477 100644 --- a/python/src/codeql-pack.lock.yml +++ b/python/src/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/python-all: - version: 7.2.4 + version: 7.2.5 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 codeql/yaml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/python/src/qlpack.yml b/python/src/qlpack.yml index 027f0541..6b662fd7 100644 --- a/python/src/qlpack.yml +++ b/python/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-python-queries -version: 0.7.7 +version: 0.8.0 suites: suites defaultSuiteFile: suites/python.qls dependencies: - codeql/python-all: '7.2.4' + codeql/python-all: '7.2.5' githubsecuritylab/codeql-python-libs: '*' diff --git a/python/test/codeql-pack.lock.yml b/python/test/codeql-pack.lock.yml index f3f58a3c..26ad7681 100644 --- a/python/test/codeql-pack.lock.yml +++ b/python/test/codeql-pack.lock.yml @@ -2,33 +2,33 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/python-all: - version: 7.2.4 + version: 7.2.5 codeql/python-queries: - version: 1.8.9 + version: 1.8.10 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/suite-helpers: - version: 1.0.56 + version: 1.0.57 codeql/threat-models: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 codeql/xml: - version: 1.0.56 + version: 1.0.57 codeql/yaml: - version: 1.0.56 + version: 1.0.57 compiled: false diff --git a/python/test/qlpack.yml b/python/test/qlpack.yml index 1bd59266..b32caa63 100644 --- a/python/test/qlpack.yml +++ b/python/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-python-tests groups: [python, test] dependencies: - codeql/python-all: '7.2.4' - codeql/python-queries: '1.8.9' + codeql/python-all: '7.2.5' + codeql/python-queries: '1.8.10' githubsecuritylab/codeql-python-queries: '*' githubsecuritylab/codeql-python-libs: '*' extractor: python diff --git a/ruby/lib/codeql-pack.lock.yml b/ruby/lib/codeql-pack.lock.yml index 08a40910..0d64c5c4 100644 --- a/ruby/lib/codeql-pack.lock.yml +++ b/ruby/lib/codeql-pack.lock.yml @@ -2,25 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/namebinding: - version: 0.0.5 + version: 0.0.6 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ruby-all: - version: 6.0.4 + version: 7.0.0 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 compiled: false diff --git a/ruby/lib/qlpack.yml b/ruby/lib/qlpack.yml index fabf6463..05698c7f 100644 --- a/ruby/lib/qlpack.yml +++ b/ruby/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-ruby-libs -version: 0.7.7 +version: 0.8.0 dependencies: - codeql/ruby-all: '6.0.4' + codeql/ruby-all: '7.0.0' diff --git a/ruby/src/codeql-pack.lock.yml b/ruby/src/codeql-pack.lock.yml index 08a40910..0d64c5c4 100644 --- a/ruby/src/codeql-pack.lock.yml +++ b/ruby/src/codeql-pack.lock.yml @@ -2,25 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/namebinding: - version: 0.0.5 + version: 0.0.6 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ruby-all: - version: 6.0.4 + version: 7.0.0 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 compiled: false diff --git a/ruby/src/qlpack.yml b/ruby/src/qlpack.yml index d9925a19..42dac32a 100644 --- a/ruby/src/qlpack.yml +++ b/ruby/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-ruby-queries -version: 0.7.7 +version: 0.8.0 suites: suites defaultSuiteFile: suites/ruby.qls dependencies: - codeql/ruby-all: '6.0.4' + codeql/ruby-all: '7.0.0' githubsecuritylab/codeql-ruby-libs: '*' diff --git a/ruby/src/security/CWE-770/UserControlledMaxIterations.ql b/ruby/src/security/CWE-770/UserControlledMaxIterations.ql index 0557005e..1e4b3b42 100644 --- a/ruby/src/security/CWE-770/UserControlledMaxIterations.ql +++ b/ruby/src/security/CWE-770/UserControlledMaxIterations.ql @@ -72,7 +72,7 @@ class ParamsRFS extends RemoteFlowSource::Range { exists(ElementReference er, MethodCall mc | er.getReceiver() = mc and mc.getMethodName() = "params" and - this.asExpr() = er.getAControlFlowNode() + this.asExpr() = er.getControlFlowNode() ) } diff --git a/ruby/test/codeql-pack.lock.yml b/ruby/test/codeql-pack.lock.yml index 57c0c5aa..0c81ed7d 100644 --- a/ruby/test/codeql-pack.lock.yml +++ b/ruby/test/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.30 + version: 0.0.31 codeql/controlflow: - version: 2.0.40 + version: 2.0.41 codeql/dataflow: - version: 2.1.12 + version: 2.1.13 codeql/mad: - version: 1.0.56 + version: 1.0.57 codeql/namebinding: - version: 0.0.5 + version: 0.0.6 codeql/regex: - version: 1.0.56 + version: 1.0.57 codeql/ruby-all: - version: 6.0.4 + version: 7.0.0 codeql/ruby-queries: - version: 1.6.9 + version: 1.6.10 codeql/ssa: - version: 2.0.32 + version: 2.0.33 codeql/suite-helpers: - version: 1.0.56 + version: 1.0.57 codeql/tutorial: - version: 1.0.56 + version: 1.0.57 codeql/typetracking: - version: 2.0.40 + version: 2.0.41 codeql/util: - version: 2.0.43 + version: 2.0.44 compiled: false diff --git a/ruby/test/qlpack.yml b/ruby/test/qlpack.yml index a39804b3..51f8124b 100644 --- a/ruby/test/qlpack.yml +++ b/ruby/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-ruby-tests groups: [ruby, test] dependencies: - codeql/ruby-all: '6.0.4' - codeql/ruby-queries: '1.6.9' + codeql/ruby-all: '7.0.0' + codeql/ruby-queries: '1.6.10' githubsecuritylab/codeql-ruby-queries: '*' githubsecuritylab/codeql-ruby-libs: '*' extractor: ruby