codeql-ci-app · Oct 29, 2026
@@ -1,3 +1,7 @@
+## 0.7.1
+
+No user-facing changes.
+
 ## 0.7.0
 
 ### Breaking Changes

@@ -0,0 +1,3 @@
+## 0.7.1
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.7.0
+lastReleaseVersion: 0.7.1
@@ -1,5 +1,5 @@
 name: codeql/actions-all
-version: 0.7.1-dev
+version: 0.7.1
 library: true
 warnOnImplicitThis: true
 dependencies:

@@ -1,3 +1,7 @@
+## 0.6.39
+
+No user-facing changes.
+
 ## 0.6.38
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 0.6.39
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.6.38
+lastReleaseVersion: 0.6.39
@@ -1,5 +1,5 @@
 name: codeql/actions-queries
-version: 0.6.39-dev
+version: 0.6.39
 library: false
 warnOnImplicitThis: true
 groups: [actions, queries]

@@ -1,3 +1,10 @@
+## 12.4.0
+
+### New Features
+
+* Added support for the `__builtin_lt_synthesizes_from_spaceship`, `__builtin_gt_synthesizes_from_spaceship`, `__builtin_le_synthesizes_from_spaceship`, `__builtin_ge_synthesizes_from_spaceship`, `__builtin_is_implicit_lifetime`, `__builtin_is_structural`, and `__builtin_is_virtual_base_of` builtin operations.
+* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type.
+
 ## 12.3.0
 
 ### New Features

@@ -1,4 +1,6 @@
----
-category: feature
----
+## 12.4.0
+
+### New Features
+
 * Added support for the `__builtin_lt_synthesizes_from_spaceship`, `__builtin_gt_synthesizes_from_spaceship`, `__builtin_le_synthesizes_from_spaceship`, `__builtin_ge_synthesizes_from_spaceship`, `__builtin_is_implicit_lifetime`, `__builtin_is_structural`, and `__builtin_is_virtual_base_of` builtin operations.
+* Added a new predicate `getBitWidth` to the `Type` class, which yields the bit-width of the type.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 12.3.0
+lastReleaseVersion: 12.4.0
@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 12.3.1-dev
+version: 12.4.0
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

@@ -1,3 +1,9 @@
+## 1.10.0
+
+### Query Metadata Changes
+
+* Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code.
+
 ## 1.9.2
 
 ### Minor Analysis Improvements

@@ -1,4 +1,5 @@
----
-category: queryMetadata
----
+## 1.10.0
+
+### Query Metadata Changes
+
 * Added a new `cpp-code-quality` query suite containing queries that identify maintainability and reliability issues in C and C++ code.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.9.2
+lastReleaseVersion: 1.10.0
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 1.9.3-dev
+version: 1.10.0
 groups:
   - cpp
   - queries

@@ -1,3 +1,7 @@
+## 1.7.78
+
+No user-facing changes.
+
 ## 1.7.77
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.7.78
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.77
+lastReleaseVersion: 1.7.78
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.7.78-dev
+version: 1.7.78
 groups:
   - csharp
   - solorigate

@@ -1,3 +1,7 @@
+## 1.7.78
+
+No user-facing changes.
+
 ## 1.7.77
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.7.78
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.77
+lastReleaseVersion: 1.7.78
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.7.78-dev
+version: 1.7.78
 groups:
   - csharp
   - solorigate

@@ -1,3 +1,9 @@
+## 7.4.2
+
+### Minor Analysis Improvements
+
+* Rolled back the change that set proxy and certificate environment variables for the subprocess that invokes the NuGet CLI because the environment variables were only partially respected by the target process in some cases.
+
 ## 7.4.1
 
 ### Minor Analysis Improvements

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 7.4.2
+
+### Minor Analysis Improvements
+
 * Rolled back the change that set proxy and certificate environment variables for the subprocess that invokes the NuGet CLI because the environment variables were only partially respected by the target process in some cases.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 7.4.1
+lastReleaseVersion: 7.4.2
@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 7.4.2-dev
+version: 7.4.2
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

@@ -1,3 +1,9 @@
+## 1.11.0
+
+### Query Metadata Changes
+
+* The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.
+
 ## 1.10.2
 
 ### Minor Analysis Improvements

@@ -1,4 +1,5 @@
----
-category: queryMetadata
----
+## 1.11.0
+
+### Query Metadata Changes
+
 * The `external/cwe/cwe-730` tag has been removed from `cs/redos` and `cs/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.10.2
+lastReleaseVersion: 1.11.0
@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 1.10.3-dev
+version: 1.11.0
 groups:
   - csharp
   - queries

@@ -1,3 +1,7 @@
+## 1.0.61
+
+No user-facing changes.
+
 ## 1.0.60
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.0.61
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.60
+lastReleaseVersion: 1.0.61
@@ -1,5 +1,5 @@
 name: codeql-go-consistency-queries
-version: 1.0.61-dev
+version: 1.0.61
 groups:
   - go
   - queries

@@ -1,3 +1,17 @@
+## 8.1.0
+
+### Deprecated APIs
+
+* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead.
+
+### New Features
+
+* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates.
+
+### Bug Fixes
+
+* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`.
+
 ## 8.0.1
 
 No user-facing changes.

@@ -0,0 +1,13 @@
+## 8.1.0
+
+### Deprecated APIs
+
+* `ControlFlow::ConditionGuardNode` is now deprecated. Use the API from `semmle.go.controlflow.Guards` instead.
+
+### New Features
+
+* The Go language library now instantiates the shared library `semmle.go.controlflow.Guards`, including the `Guard` and `GuardValue` classes and the `guardEnsures`, `guardEnsuresEq`, `guardEnsuresNeq`, and `guardEnsuresLeq` predicates.
+
+### Bug Fixes
+
+* The Go extractor no longer modifies the global Git configuration when private `git_source` registries are configured. The registry proxy certificate is now passed to Git through the `GIT_SSL_CAINFO` environment variable instead, which only affects the Git processes spawned by `go`.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 8.0.1
+lastReleaseVersion: 8.1.0
@@ -1,5 +1,5 @@
 name: codeql/go-all
-version: 8.0.2-dev
+version: 8.1.0
 groups: go
 dbscheme: go.dbscheme
 extractor: go

@@ -1,3 +1,7 @@
+## 1.6.14
+
+No user-facing changes.
+
 ## 1.6.13
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.6.14
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.6.13
+lastReleaseVersion: 1.6.14
@@ -1,5 +1,5 @@
 name: codeql/go-queries
-version: 1.6.14-dev
+version: 1.6.14
 groups:
   - go
   - queries

@@ -1,3 +1,7 @@
+## 9.3.4
+
+No user-facing changes.
+
 ## 9.3.3
 
 ### Minor Analysis Improvements

@@ -0,0 +1,3 @@
+## 9.3.4
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 9.3.3
+lastReleaseVersion: 9.3.4
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 9.3.4-dev
+version: 9.3.4
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

@@ -1,3 +1,9 @@
+## 1.12.0
+
+### Query Metadata Changes
+
+* The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.
+
 ## 1.11.13
 
 No user-facing changes.

@@ -1,4 +1,5 @@
----
-category: queryMetadata
----
+## 1.12.0
+
+### Query Metadata Changes
+
 * The `external/cwe/cwe-730` tag has been removed from `java/redos`, `java/polynomial-redos` and `java/regex-injection`, because MITRE has marked CWE-730 as prohibited for vulnerability mapping. The queries retain their other CWE tags.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.11.13
+lastReleaseVersion: 1.12.0
@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 1.11.14-dev
+version: 1.12.0
 groups:
   - java
   - queries

@@ -1,3 +1,14 @@
+## 3.0.0
+
+### Breaking Changes
+
+* The `SEMMLE_TYPESCRIPT_HOME` environment variable is no longer supported. The JavaScript/TypeScript extractor now ignores the environment variable and always uses its bundled TypeScript compiler.
+
+### Minor Analysis Improvements
+
+* Added taint steps for `String.prototype.trimStart`, `trimEnd`, and `normalize`.
+* Fixed the flow summary for `Array.prototype.flatMap`. The `thisArg` argument now flows to the callback's `this` instead of its index parameter.
+
 ## 2.10.4
 
 No user-facing changes.