From a09db733a696cb391532e8e1cc09bf4d7c874313 Mon Sep 17 00:00:00 2001 From: felickz <1760475+felickz@users.noreply.github.com> Date: Fri, 9 Oct 2026 20:36:15 +0000 Subject: [PATCH 1/2] chore: bump pinned CodeQL CLI to v2.27.2 and release v0.8.2 --- .codeqlversion | 2 +- .release.yml | 2 +- cpp/lib/codeql-pack.lock.yml | 26 ++++++++++++----------- cpp/lib/qlpack.yml | 4 ++-- cpp/src/codeql-pack.lock.yml | 30 ++++++++++++++------------- cpp/src/qlpack.yml | 6 +++--- cpp/test/codeql-pack.lock.yml | 30 ++++++++++++++------------- cpp/test/qlpack.yml | 4 ++-- csharp/ext-library-sources/qlpack.yml | 2 +- csharp/ext/qlpack.yml | 2 +- csharp/lib/codeql-pack.lock.yml | 22 ++++++++++---------- csharp/lib/qlpack.yml | 4 ++-- csharp/src/codeql-pack.lock.yml | 26 +++++++++++------------ csharp/src/qlpack.yml | 6 +++--- csharp/test/codeql-pack.lock.yml | 26 +++++++++++------------ csharp/test/qlpack.yml | 4 ++-- go/ext/qlpack.yml | 2 +- go/lib/codeql-pack.lock.yml | 20 +++++++++--------- go/lib/qlpack.yml | 4 ++-- go/src/codeql-pack.lock.yml | 20 +++++++++--------- go/src/qlpack.yml | 4 ++-- go/test/codeql-pack.lock.yml | 20 +++++++++--------- go/test/qlpack.yml | 2 +- java/ext-library-sources/qlpack.yml | 2 +- java/ext/qlpack.yml | 2 +- java/lib/codeql-pack.lock.yml | 28 ++++++++++++------------- java/lib/qlpack.yml | 4 ++-- java/src/codeql-pack.lock.yml | 28 ++++++++++++------------- java/src/qlpack.yml | 4 ++-- java/test/codeql-pack.lock.yml | 28 ++++++++++++------------- java/test/qlpack.yml | 2 +- javascript/lib/codeql-pack.lock.yml | 26 +++++++++++------------ javascript/lib/qlpack.yml | 4 ++-- javascript/src/codeql-pack.lock.yml | 26 +++++++++++------------ javascript/src/qlpack.yml | 4 ++-- javascript/test/codeql-pack.lock.yml | 26 +++++++++++------------ javascript/test/qlpack.yml | 2 +- python/ext/qlpack.yml | 2 +- python/lib/codeql-pack.lock.yml | 26 +++++++++++------------ python/lib/qlpack.yml | 4 ++-- python/src/codeql-pack.lock.yml | 26 +++++++++++------------ python/src/qlpack.yml | 4 ++-- python/test/codeql-pack.lock.yml | 30 +++++++++++++-------------- python/test/qlpack.yml | 4 ++-- ruby/lib/codeql-pack.lock.yml | 22 ++++++++++---------- ruby/lib/qlpack.yml | 4 ++-- ruby/src/codeql-pack.lock.yml | 22 ++++++++++---------- ruby/src/qlpack.yml | 4 ++-- ruby/test/codeql-pack.lock.yml | 26 +++++++++++------------ ruby/test/qlpack.yml | 4 ++-- 50 files changed, 319 insertions(+), 313 deletions(-) diff --git a/.codeqlversion b/.codeqlversion index f0465234..05abc552 100644 --- a/.codeqlversion +++ b/.codeqlversion @@ -1 +1 @@ -2.27.1 +2.27.2 diff --git a/.release.yml b/.release.yml index 0df9d409..fce27d2c 100644 --- a/.release.yml +++ b/.release.yml @@ -1,6 +1,6 @@ name: "CodeQL Community Packs" repository: "githubsecuritylab/codeql-community-packs" -version: "0.8.1" +version: "0.8.2" prerelease: false ecosystem: CodeQL diff --git a/cpp/lib/codeql-pack.lock.yml b/cpp/lib/codeql-pack.lock.yml index 4422c145..299b0076 100644 --- a/cpp/lib/codeql-pack.lock.yml +++ b/cpp/lib/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/cpp-all: - version: 12.1.1 + version: 12.2.0 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/quantum: - version: 0.0.36 + version: 0.0.37 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 + codeql/regex: + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typeflow: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/cpp/lib/qlpack.yml b/cpp/lib/qlpack.yml index e4d87243..f3079463 100644 --- a/cpp/lib/qlpack.yml +++ b/cpp/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-cpp-libs -version: 0.8.1 +version: 0.8.2 dependencies: - codeql/cpp-all: '12.1.1' + codeql/cpp-all: '12.2.0' diff --git a/cpp/src/codeql-pack.lock.yml b/cpp/src/codeql-pack.lock.yml index d53fb94d..18f1cc55 100644 --- a/cpp/src/codeql-pack.lock.yml +++ b/cpp/src/codeql-pack.lock.yml @@ -2,31 +2,33 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/cpp-all: - version: 12.1.1 + version: 12.2.0 codeql/cpp-queries: - version: 1.9.0 + version: 1.9.1 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/quantum: - version: 0.0.36 + version: 0.0.37 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 + codeql/regex: + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/suite-helpers: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typeflow: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/cpp/src/qlpack.yml b/cpp/src/qlpack.yml index f0e902fb..a6e91d34 100644 --- a/cpp/src/qlpack.yml +++ b/cpp/src/qlpack.yml @@ -1,9 +1,9 @@ library: false name: githubsecuritylab/codeql-cpp-queries -version: 0.8.1 +version: 0.8.2 suites: suites defaultSuiteFile: suites/cpp.qls dependencies: - codeql/cpp-all: '12.1.1' - codeql/cpp-queries: '1.9.0' + codeql/cpp-all: '12.2.0' + codeql/cpp-queries: '1.9.1' githubsecuritylab/codeql-cpp-libs: '*' diff --git a/cpp/test/codeql-pack.lock.yml b/cpp/test/codeql-pack.lock.yml index d53fb94d..18f1cc55 100644 --- a/cpp/test/codeql-pack.lock.yml +++ b/cpp/test/codeql-pack.lock.yml @@ -2,31 +2,33 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/cpp-all: - version: 12.1.1 + version: 12.2.0 codeql/cpp-queries: - version: 1.9.0 + version: 1.9.1 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/quantum: - version: 0.0.36 + version: 0.0.37 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 + codeql/regex: + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/suite-helpers: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typeflow: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/cpp/test/qlpack.yml b/cpp/test/qlpack.yml index 10869a52..03082d4e 100644 --- a/cpp/test/qlpack.yml +++ b/cpp/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-cpp-tests groups: [cpp, test] dependencies: - codeql/cpp-all: '12.1.1' - codeql/cpp-queries: '1.9.0' + codeql/cpp-all: '12.2.0' + codeql/cpp-queries: '1.9.1' githubsecuritylab/codeql-cpp-queries: '*' githubsecuritylab/codeql-cpp-libs: '*' extractor: cpp diff --git a/csharp/ext-library-sources/qlpack.yml b/csharp/ext-library-sources/qlpack.yml index 657fef9f..f0c4ae57 100644 --- a/csharp/ext-library-sources/qlpack.yml +++ b/csharp/ext-library-sources/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-csharp-library-sources -version: 0.8.1 +version: 0.8.2 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/csharp-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/csharp/ext/qlpack.yml b/csharp/ext/qlpack.yml index e4f11f02..6a20f091 100644 --- a/csharp/ext/qlpack.yml +++ b/csharp/ext/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-csharp-extensions -version: 0.8.1 +version: 0.8.2 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/csharp-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/csharp/lib/codeql-pack.lock.yml b/csharp/lib/codeql-pack.lock.yml index 03719ee2..4f8ad406 100644 --- a/csharp/lib/codeql-pack.lock.yml +++ b/csharp/lib/codeql-pack.lock.yml @@ -2,25 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/csharp-all: - version: 7.3.1 + version: 7.4.0 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/csharp/lib/qlpack.yml b/csharp/lib/qlpack.yml index 9459022b..5963dacd 100644 --- a/csharp/lib/qlpack.yml +++ b/csharp/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-csharp-libs -version: 0.8.1 +version: 0.8.2 dependencies: - codeql/csharp-all: "7.3.1" + codeql/csharp-all: "7.4.0" diff --git a/csharp/src/codeql-pack.lock.yml b/csharp/src/codeql-pack.lock.yml index 35da32bc..9e42b023 100644 --- a/csharp/src/codeql-pack.lock.yml +++ b/csharp/src/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/csharp-all: - version: 7.3.1 + version: 7.4.0 codeql/csharp-queries: - version: 1.10.0 + version: 1.10.1 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/suite-helpers: - version: 1.0.58 + version: 1.0.59 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/csharp/src/qlpack.yml b/csharp/src/qlpack.yml index f15876ad..f82f0064 100644 --- a/csharp/src/qlpack.yml +++ b/csharp/src/qlpack.yml @@ -1,9 +1,9 @@ library: false name: githubsecuritylab/codeql-csharp-queries -version: 0.8.1 +version: 0.8.2 suites: suites defaultSuiteFile: suites/csharp.qls dependencies: - codeql/csharp-all: "7.3.1" - codeql/csharp-queries: "1.10.0" # Required by suites/csharp-audit.qls and suites/csharp-external-api.qls for upstream cs/untrusted-data-to-external-api + codeql/csharp-all: "7.4.0" + codeql/csharp-queries: "1.10.1" # Required by suites/csharp-audit.qls and suites/csharp-external-api.qls for upstream cs/untrusted-data-to-external-api githubsecuritylab/codeql-csharp-libs: "*" diff --git a/csharp/test/codeql-pack.lock.yml b/csharp/test/codeql-pack.lock.yml index 35da32bc..9e42b023 100644 --- a/csharp/test/codeql-pack.lock.yml +++ b/csharp/test/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/csharp-all: - version: 7.3.1 + version: 7.4.0 codeql/csharp-queries: - version: 1.10.0 + version: 1.10.1 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/suite-helpers: - version: 1.0.58 + version: 1.0.59 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/csharp/test/qlpack.yml b/csharp/test/qlpack.yml index 36c832dc..93588a1c 100644 --- a/csharp/test/qlpack.yml +++ b/csharp/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-csharp-tests groups: [csharp, test] dependencies: - codeql/csharp-all: "7.3.1" - codeql/csharp-queries: "1.10.0" + codeql/csharp-all: "7.4.0" + codeql/csharp-queries: "1.10.1" githubsecuritylab/codeql-csharp-extensions: "*" githubsecuritylab/codeql-csharp-library-sources: "*" githubsecuritylab/codeql-csharp-libs: "*" diff --git a/go/ext/qlpack.yml b/go/ext/qlpack.yml index 2cf290dd..9f449c3e 100644 --- a/go/ext/qlpack.yml +++ b/go/ext/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-go-extensions -version: 0.8.1 +version: 0.8.2 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/go-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/go/lib/codeql-pack.lock.yml b/go/lib/codeql-pack.lock.yml index 195c3fdf..4aff45b5 100644 --- a/go/lib/codeql-pack.lock.yml +++ b/go/lib/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/go-all: - version: 7.3.2 + version: 8.0.0 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 compiled: false diff --git a/go/lib/qlpack.yml b/go/lib/qlpack.yml index cc0ac471..d9039c11 100644 --- a/go/lib/qlpack.yml +++ b/go/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-go-libs -version: 0.8.1 +version: 0.8.2 dependencies: - codeql/go-all: '7.3.2' + codeql/go-all: '8.0.0' diff --git a/go/src/codeql-pack.lock.yml b/go/src/codeql-pack.lock.yml index 195c3fdf..4aff45b5 100644 --- a/go/src/codeql-pack.lock.yml +++ b/go/src/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/go-all: - version: 7.3.2 + version: 8.0.0 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 compiled: false diff --git a/go/src/qlpack.yml b/go/src/qlpack.yml index 1662103e..dd43bfe0 100644 --- a/go/src/qlpack.yml +++ b/go/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-go-queries -version: 0.8.1 +version: 0.8.2 suites: suites defaultSuiteFile: suites/go.qls dependencies: - codeql/go-all: '7.3.2' + codeql/go-all: '8.0.0' githubsecuritylab/codeql-go-libs: '*' diff --git a/go/test/codeql-pack.lock.yml b/go/test/codeql-pack.lock.yml index 195c3fdf..4aff45b5 100644 --- a/go/test/codeql-pack.lock.yml +++ b/go/test/codeql-pack.lock.yml @@ -2,23 +2,23 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/go-all: - version: 7.3.2 + version: 8.0.0 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 compiled: false diff --git a/go/test/qlpack.yml b/go/test/qlpack.yml index 8446185c..51c02ead 100644 --- a/go/test/qlpack.yml +++ b/go/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecurtylab/codeql-go-tests groups: [go, test] dependencies: - codeql/go-all: '7.3.2' + codeql/go-all: '8.0.0' # codeql/go-queries: '*' githubsecuritylab/codeql-go-queries: '*' githubsecuritylab/codeql-go-libs: '*' diff --git a/java/ext-library-sources/qlpack.yml b/java/ext-library-sources/qlpack.yml index c96c08f5..a6c299e3 100644 --- a/java/ext-library-sources/qlpack.yml +++ b/java/ext-library-sources/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-java-library-sources -version: 0.8.1 +version: 0.8.2 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/java-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/java/ext/qlpack.yml b/java/ext/qlpack.yml index 13426f48..a18e93df 100644 --- a/java/ext/qlpack.yml +++ b/java/ext/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-java-extensions -version: 0.8.1 +version: 0.8.2 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/java-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/java/lib/codeql-pack.lock.yml b/java/lib/codeql-pack.lock.yml index 857f33f0..cb925039 100644 --- a/java/lib/codeql-pack.lock.yml +++ b/java/lib/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/java-all: - version: 9.3.1 + version: 9.3.2 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/quantum: - version: 0.0.36 + version: 0.0.37 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typeflow: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/java/lib/qlpack.yml b/java/lib/qlpack.yml index 5c8c3900..6661e54e 100644 --- a/java/lib/qlpack.yml +++ b/java/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-java-libs -version: 0.8.1 +version: 0.8.2 dependencies: - codeql/java-all: '9.3.1' + codeql/java-all: '9.3.2' diff --git a/java/src/codeql-pack.lock.yml b/java/src/codeql-pack.lock.yml index 857f33f0..cb925039 100644 --- a/java/src/codeql-pack.lock.yml +++ b/java/src/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/java-all: - version: 9.3.1 + version: 9.3.2 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/quantum: - version: 0.0.36 + version: 0.0.37 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typeflow: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/java/src/qlpack.yml b/java/src/qlpack.yml index b081fd7b..0e18988b 100644 --- a/java/src/qlpack.yml +++ b/java/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-java-queries -version: 0.8.1 +version: 0.8.2 suites: suites defaultSuiteFile: suites/java.qls dependencies: - codeql/java-all: '9.3.1' + codeql/java-all: '9.3.2' githubsecuritylab/codeql-java-libs: '*' diff --git a/java/test/codeql-pack.lock.yml b/java/test/codeql-pack.lock.yml index 857f33f0..cb925039 100644 --- a/java/test/codeql-pack.lock.yml +++ b/java/test/codeql-pack.lock.yml @@ -2,31 +2,31 @@ lockVersion: 1.0.0 dependencies: codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/java-all: - version: 9.3.1 + version: 9.3.2 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/quantum: - version: 0.0.36 + version: 0.0.37 codeql/rangeanalysis: - version: 1.0.58 + version: 1.0.59 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typeflow: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/java/test/qlpack.yml b/java/test/qlpack.yml index 81f0d6f9..0fe0f788 100644 --- a/java/test/qlpack.yml +++ b/java/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecurtylab/codeql-java-tests groups: [java, test] dependencies: - codeql/java-all: '9.3.1' + codeql/java-all: '9.3.2' githubsecuritylab/codeql-java-queries: '*' githubsecuritylab/codeql-java-libs: '*' githubsecuritylab/codeql-java-library-sources: '*' diff --git a/javascript/lib/codeql-pack.lock.yml b/javascript/lib/codeql-pack.lock.yml index b547f25f..94d66a0a 100644 --- a/javascript/lib/codeql-pack.lock.yml +++ b/javascript/lib/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/javascript-all: - version: 2.10.2 + version: 2.10.3 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 codeql/yaml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/javascript/lib/qlpack.yml b/javascript/lib/qlpack.yml index 586a2d11..d8a7bb83 100644 --- a/javascript/lib/qlpack.yml +++ b/javascript/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-javascript-libs -version: 0.8.1 +version: 0.8.2 dependencies: - codeql/javascript-all: '2.10.2' + codeql/javascript-all: '2.10.3' diff --git a/javascript/src/codeql-pack.lock.yml b/javascript/src/codeql-pack.lock.yml index b547f25f..94d66a0a 100644 --- a/javascript/src/codeql-pack.lock.yml +++ b/javascript/src/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/javascript-all: - version: 2.10.2 + version: 2.10.3 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 codeql/yaml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/javascript/src/qlpack.yml b/javascript/src/qlpack.yml index aab1a5a6..29311983 100644 --- a/javascript/src/qlpack.yml +++ b/javascript/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-javascript-queries -version: 0.8.1 +version: 0.8.2 suites: suites defaultSuiteFile: suites/javascript.qls dependencies: - codeql/javascript-all: '2.10.2' + codeql/javascript-all: '2.10.3' githubsecuritylab/codeql-javascript-libs: '*' diff --git a/javascript/test/codeql-pack.lock.yml b/javascript/test/codeql-pack.lock.yml index b547f25f..94d66a0a 100644 --- a/javascript/test/codeql-pack.lock.yml +++ b/javascript/test/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/javascript-all: - version: 2.10.2 + version: 2.10.3 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 codeql/yaml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/javascript/test/qlpack.yml b/javascript/test/qlpack.yml index 7eb52569..bb9ece54 100644 --- a/javascript/test/qlpack.yml +++ b/javascript/test/qlpack.yml @@ -1,7 +1,7 @@ name: githubsecuritylab/codeql-javascript-tests groups: [javascript, test] dependencies: - codeql/javascript-all: "2.10.2" + codeql/javascript-all: "2.10.3" githubsecuritylab/codeql-javascript-queries: "*" extractor: javascript diff --git a/python/ext/qlpack.yml b/python/ext/qlpack.yml index 2de4b4c4..43a46e5e 100644 --- a/python/ext/qlpack.yml +++ b/python/ext/qlpack.yml @@ -1,6 +1,6 @@ library: true name: githubsecuritylab/codeql-python-extensions -version: 0.8.1 +version: 0.8.2 # Keep this '*' (unconstrained) - never pin/floor it to a specific # codeql/python-all version. Unlike `dependencies:`, an unsatisfied # extensionTargets constraint doesn't fail loudly: it silently drops this diff --git a/python/lib/codeql-pack.lock.yml b/python/lib/codeql-pack.lock.yml index d571c7fb..7e8fb941 100644 --- a/python/lib/codeql-pack.lock.yml +++ b/python/lib/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/python-all: - version: 7.2.6 + version: 7.2.7 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 codeql/yaml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/python/lib/qlpack.yml b/python/lib/qlpack.yml index ffed643e..ffec9e34 100644 --- a/python/lib/qlpack.yml +++ b/python/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-python-libs -version: 0.8.1 +version: 0.8.2 dependencies: - codeql/python-all: '7.2.6' + codeql/python-all: '7.2.7' diff --git a/python/src/codeql-pack.lock.yml b/python/src/codeql-pack.lock.yml index d571c7fb..7e8fb941 100644 --- a/python/src/codeql-pack.lock.yml +++ b/python/src/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/python-all: - version: 7.2.6 + version: 7.2.7 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 codeql/yaml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/python/src/qlpack.yml b/python/src/qlpack.yml index e88e3b68..78e6b6e2 100644 --- a/python/src/qlpack.yml +++ b/python/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-python-queries -version: 0.8.1 +version: 0.8.2 suites: suites defaultSuiteFile: suites/python.qls dependencies: - codeql/python-all: '7.2.6' + codeql/python-all: '7.2.7' githubsecuritylab/codeql-python-libs: '*' diff --git a/python/test/codeql-pack.lock.yml b/python/test/codeql-pack.lock.yml index da45fbb3..4a7ffff8 100644 --- a/python/test/codeql-pack.lock.yml +++ b/python/test/codeql-pack.lock.yml @@ -2,33 +2,33 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/python-all: - version: 7.2.6 + version: 7.2.7 codeql/python-queries: - version: 1.8.11 + version: 1.8.12 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/suite-helpers: - version: 1.0.58 + version: 1.0.59 codeql/threat-models: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 codeql/xml: - version: 1.0.58 + version: 1.0.59 codeql/yaml: - version: 1.0.58 + version: 1.0.59 compiled: false diff --git a/python/test/qlpack.yml b/python/test/qlpack.yml index 676bdba7..4d7decd2 100644 --- a/python/test/qlpack.yml +++ b/python/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-python-tests groups: [python, test] dependencies: - codeql/python-all: '7.2.6' - codeql/python-queries: '1.8.11' + codeql/python-all: '7.2.7' + codeql/python-queries: '1.8.12' githubsecuritylab/codeql-python-queries: '*' githubsecuritylab/codeql-python-libs: '*' extractor: python diff --git a/ruby/lib/codeql-pack.lock.yml b/ruby/lib/codeql-pack.lock.yml index 91cc462a..9a57f58c 100644 --- a/ruby/lib/codeql-pack.lock.yml +++ b/ruby/lib/codeql-pack.lock.yml @@ -2,25 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/namebinding: - version: 0.0.7 + version: 0.0.8 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ruby-all: - version: 7.0.1 + version: 7.0.2 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 compiled: false diff --git a/ruby/lib/qlpack.yml b/ruby/lib/qlpack.yml index f177f9fa..44dcc4bc 100644 --- a/ruby/lib/qlpack.yml +++ b/ruby/lib/qlpack.yml @@ -1,5 +1,5 @@ library: true name: githubsecuritylab/codeql-ruby-libs -version: 0.8.1 +version: 0.8.2 dependencies: - codeql/ruby-all: '7.0.1' + codeql/ruby-all: '7.0.2' diff --git a/ruby/src/codeql-pack.lock.yml b/ruby/src/codeql-pack.lock.yml index 91cc462a..9a57f58c 100644 --- a/ruby/src/codeql-pack.lock.yml +++ b/ruby/src/codeql-pack.lock.yml @@ -2,25 +2,25 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/namebinding: - version: 0.0.7 + version: 0.0.8 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ruby-all: - version: 7.0.1 + version: 7.0.2 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 compiled: false diff --git a/ruby/src/qlpack.yml b/ruby/src/qlpack.yml index 5dc66ad8..b8fb4be8 100644 --- a/ruby/src/qlpack.yml +++ b/ruby/src/qlpack.yml @@ -1,8 +1,8 @@ library: false name: githubsecuritylab/codeql-ruby-queries -version: 0.8.1 +version: 0.8.2 suites: suites defaultSuiteFile: suites/ruby.qls dependencies: - codeql/ruby-all: '7.0.1' + codeql/ruby-all: '7.0.2' githubsecuritylab/codeql-ruby-libs: '*' diff --git a/ruby/test/codeql-pack.lock.yml b/ruby/test/codeql-pack.lock.yml index cdc92cfa..347f02bb 100644 --- a/ruby/test/codeql-pack.lock.yml +++ b/ruby/test/codeql-pack.lock.yml @@ -2,29 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.32 + version: 0.0.33 codeql/controlflow: - version: 2.0.42 + version: 2.0.43 codeql/dataflow: - version: 2.1.14 + version: 2.1.15 codeql/mad: - version: 1.0.58 + version: 1.0.59 codeql/namebinding: - version: 0.0.7 + version: 0.0.8 codeql/regex: - version: 1.0.58 + version: 1.0.59 codeql/ruby-all: - version: 7.0.1 + version: 7.0.2 codeql/ruby-queries: - version: 1.6.11 + version: 1.6.12 codeql/ssa: - version: 2.0.34 + version: 2.0.35 codeql/suite-helpers: - version: 1.0.58 + version: 1.0.59 codeql/tutorial: - version: 1.0.58 + version: 1.0.59 codeql/typetracking: - version: 2.0.42 + version: 2.0.43 codeql/util: - version: 2.0.45 + version: 2.0.46 compiled: false diff --git a/ruby/test/qlpack.yml b/ruby/test/qlpack.yml index bcfb4655..bb351fbf 100644 --- a/ruby/test/qlpack.yml +++ b/ruby/test/qlpack.yml @@ -1,8 +1,8 @@ name: githubsecurtylab/codeql-ruby-tests groups: [ruby, test] dependencies: - codeql/ruby-all: '7.0.1' - codeql/ruby-queries: '1.6.11' + codeql/ruby-all: '7.0.2' + codeql/ruby-queries: '1.6.12' githubsecuritylab/codeql-ruby-queries: '*' githubsecuritylab/codeql-ruby-libs: '*' extractor: ruby From cbcca1fbb13f9f4a487cc1b6ee55578000e73476 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sat, 10 Oct 2026 02:45:20 +0000 Subject: [PATCH 2/2] Update Go provenance test expectation Co-authored-by: felickz <1760475+felickz@users.noreply.github.com> --- go/test/security/CWE-078/cmdi.expected | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/go/test/security/CWE-078/cmdi.expected b/go/test/security/CWE-078/cmdi.expected index ae931f40..59ebfa0b 100644 --- a/go/test/security/CWE-078/cmdi.expected +++ b/go/test/security/CWE-078/cmdi.expected @@ -1,6 +1,6 @@ edges -| main.go:20:14:20:20 | selection of URL | main.go:20:14:20:28 | call to Query | provenance | Src:MaD:2002 MaD:2064 | -| main.go:20:14:20:28 | call to Query | main.go:27:22:27:28 | cmdName | provenance | Sink:MaD:2075 | +| main.go:20:14:20:20 | selection of URL | main.go:20:14:20:28 | call to Query | provenance | Src:MaD:2006 MaD:2068 | +| main.go:20:14:20:28 | call to Query | main.go:27:22:27:28 | cmdName | provenance | Sink:MaD:2077 | nodes | main.go:20:14:20:20 | selection of URL | semmle.label | selection of URL | | main.go:20:14:20:28 | call to Query | semmle.label | call to Query |