github · cklin · Jun 9, 2025 · Jun 9, 2025 · Jun 9, 2025 · Jun 9, 2025
@@ -1,3 +1,7 @@
+## 0.4.11
+
+No user-facing changes.
+
 ## 0.4.10
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 0.4.11
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.4.10
+lastReleaseVersion: 0.4.11
@@ -1,5 +1,5 @@
 name: codeql/actions-all
-version: 0.4.11-dev
+version: 0.4.12-dev
 library: true
 warnOnImplicitThis: true
 dependencies:

@@ -1,3 +1,7 @@
+## 0.6.3
+
+No user-facing changes.
+
 ## 0.6.2
 
 ### Minor Analysis Improvements

@@ -0,0 +1,3 @@
+## 0.6.3
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 0.6.2
+lastReleaseVersion: 0.6.3
@@ -1,5 +1,5 @@
 name: codeql/actions-queries
-version: 0.6.3-dev
+version: 0.6.4-dev
 library: false
 warnOnImplicitThis: true
 groups: [actions, queries]

@@ -1,3 +1,9 @@
+## 5.1.0
+
+### New Features
+
+* Added a predicate `getReferencedMember` to `UsingDeclarationEntry`, which yields a member depending on a type template parameter.
+
 ## 5.0.0
 
 ### Breaking Changes

@@ -1,4 +1,5 @@
----
-category: feature
----
+## 5.1.0
+
+### New Features
+
 * Added a predicate `getReferencedMember` to `UsingDeclarationEntry`, which yields a member depending on a type template parameter.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 5.0.0
+lastReleaseVersion: 5.1.0
@@ -1,5 +1,5 @@
 name: codeql/cpp-all
-version: 5.0.1-dev
+version: 5.1.1-dev
 groups: cpp
 dbscheme: semmlecode.cpp.dbscheme
 extractor: cpp

@@ -1,3 +1,7 @@
+## 1.4.2
+
+No user-facing changes.
+
 ## 1.4.1
 
 ### Minor Analysis Improvements

@@ -0,0 +1,3 @@
+## 1.4.2
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.4.1
+lastReleaseVersion: 1.4.2
@@ -1,5 +1,5 @@
 name: codeql/cpp-queries
-version: 1.4.2-dev
+version: 1.4.3-dev
 groups:
   - cpp
   - queries

@@ -1,3 +1,7 @@
+## 1.7.42
+
+No user-facing changes.
+
 ## 1.7.41
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.7.42
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.41
+lastReleaseVersion: 1.7.42
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-all
-version: 1.7.42-dev
+version: 1.7.43-dev
 groups:
   - csharp
   - solorigate

@@ -1,3 +1,7 @@
+## 1.7.42
+
+No user-facing changes.
+
 ## 1.7.41
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.7.42
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.7.41
+lastReleaseVersion: 1.7.42
@@ -1,5 +1,5 @@
 name: codeql/csharp-solorigate-queries
-version: 1.7.42-dev
+version: 1.7.43-dev
 groups:
   - csharp
   - solorigate

@@ -1,3 +1,7 @@
+## 5.1.8
+
+No user-facing changes.
+
 ## 5.1.7
 
 ### Minor Analysis Improvements

@@ -0,0 +1,3 @@
+## 5.1.8
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 5.1.7
+lastReleaseVersion: 5.1.8
@@ -1,5 +1,5 @@
 name: codeql/csharp-all
-version: 5.1.8-dev
+version: 5.1.9-dev
 groups: csharp
 dbscheme: semmlecode.csharp.dbscheme
 extractor: csharp

@@ -1,3 +1,7 @@
+## 1.2.2
+
+No user-facing changes.
+
 ## 1.2.1
 
 ### Minor Analysis Improvements

@@ -0,0 +1,3 @@
+## 1.2.2
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.2.1
+lastReleaseVersion: 1.2.2
@@ -1,5 +1,5 @@
 name: codeql/csharp-queries
-version: 1.2.2-dev
+version: 1.2.3-dev
 groups:
   - csharp
   - queries

@@ -1,3 +1,7 @@
+## 1.0.25
+
+No user-facing changes.
+
 ## 1.0.24
 
 No user-facing changes.

@@ -0,0 +1,3 @@
+## 1.0.25
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.24
+lastReleaseVersion: 1.0.25
@@ -1,5 +1,5 @@
 name: codeql-go-consistency-queries
-version: 1.0.25-dev
+version: 1.0.26-dev
 groups:
   - go
   - queries

@@ -1,3 +1,9 @@
+## 4.2.7
+
+### Minor Analysis Improvements
+
+* The first argument of `Client.Query` in `cloud.google.com/go/bigquery` is now recognized as a SQL injection sink.
+
 ## 4.2.6
 
 No user-facing changes.

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 4.2.7
+
+### Minor Analysis Improvements
+
 * The first argument of `Client.Query` in `cloud.google.com/go/bigquery` is now recognized as a SQL injection sink.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 4.2.6
+lastReleaseVersion: 4.2.7
@@ -1,5 +1,5 @@
 name: codeql/go-all
-version: 4.2.7-dev
+version: 4.2.8-dev
 groups: go
 dbscheme: go.dbscheme
 extractor: go

@@ -1,3 +1,9 @@
+## 1.3.0
+
+### New Queries
+
+* Query (`go/html-template-escaping-bypass-xss`) has been promoted to the main query suite. This query finds potential cross-site scripting (XSS) vulnerabilities when using the `html/template` package, caused by user input being cast to a type which bypasses the HTML autoescaping. It was originally contributed to the experimental query pack by @gagliardetto in <https://github.com/github/codeql-go/pull/493>.
+
 ## 1.2.1
 
 ### Minor Analysis Improvements

@@ -1,4 +1,5 @@
----
-category: newQuery
----
+## 1.3.0
+
+### New Queries
+
 * Query (`go/html-template-escaping-bypass-xss`) has been promoted to the main query suite. This query finds potential cross-site scripting (XSS) vulnerabilities when using the `html/template` package, caused by user input being cast to a type which bypasses the HTML autoescaping. It was originally contributed to the experimental query pack by @gagliardetto in <https://github.com/github/codeql-go/pull/493>.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.2.1
+lastReleaseVersion: 1.3.0
@@ -1,5 +1,5 @@
 name: codeql/go-queries
-version: 1.2.2-dev
+version: 1.3.1-dev
 groups:
   - go
   - queries

@@ -1,3 +1,7 @@
+## 7.3.1
+
+No user-facing changes.
+
 ## 7.3.0
 
 ### Deprecated APIs

@@ -0,0 +1,3 @@
+## 7.3.1
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 7.3.0
+lastReleaseVersion: 7.3.1
@@ -1,5 +1,5 @@
 name: codeql/java-all
-version: 7.3.1-dev
+version: 7.3.2-dev
 groups: java
 dbscheme: config/semmlecode.dbscheme
 extractor: java

@@ -1,3 +1,7 @@
+## 1.5.2
+
+No user-facing changes.
+
 ## 1.5.1
 
 ### Minor Analysis Improvements

@@ -0,0 +1,3 @@
+## 1.5.2
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.5.1
+lastReleaseVersion: 1.5.2
@@ -1,5 +1,5 @@
 name: codeql/java-queries
-version: 1.5.2-dev
+version: 1.5.3-dev
 groups:
   - java
   - queries

@@ -1,3 +1,9 @@
+## 2.6.5
+
+### Minor Analysis Improvements
+
+* Added taint flow through the `URL` constructor from the `url` package, improving the identification of SSRF vulnerabilities.
+
 ## 2.6.4
 
 ### Minor Analysis Improvements

@@ -1,4 +1,5 @@
----
-category: minorAnalysis
----
+## 2.6.5
+
+### Minor Analysis Improvements
+
 * Added taint flow through the `URL` constructor from the `url` package, improving the identification of SSRF vulnerabilities.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 2.6.4
+lastReleaseVersion: 2.6.5
@@ -1,5 +1,5 @@
 name: codeql/javascript-all
-version: 2.6.5-dev
+version: 2.6.6-dev
 groups: javascript
 dbscheme: semmlecode.javascript.dbscheme
 extractor: javascript

@@ -1,3 +1,7 @@
+## 1.6.2
+
+No user-facing changes.
+
 ## 1.6.1
 
 ### Minor Analysis Improvements

@@ -0,0 +1,3 @@
+## 1.6.2
+
+No user-facing changes.
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.6.1
+lastReleaseVersion: 1.6.2
@@ -1,5 +1,5 @@
 name: codeql/javascript-queries
-version: 1.6.2-dev
+version: 1.6.3-dev
 groups:
   - javascript
   - queries

diff --git a/misc/suite-helpers/CHANGELOG.md b/misc/suite-helpers/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 1.0.25
+
+No user-facing changes.
+
 ## 1.0.24
 
 No user-facing changes.

diff --git a/misc/suite-helpers/change-notes/released/1.0.25.md b/misc/suite-helpers/change-notes/released/1.0.25.md
@@ -0,0 +1,3 @@
+## 1.0.25
+
+No user-facing changes.
diff --git a/misc/suite-helpers/codeql-pack.release.yml b/misc/suite-helpers/codeql-pack.release.yml
@@ -1,2 +1,2 @@
 ---
-lastReleaseVersion: 1.0.24
+lastReleaseVersion: 1.0.25
diff --git a/misc/suite-helpers/qlpack.yml b/misc/suite-helpers/qlpack.yml
@@ -1,4 +1,4 @@
 name: codeql/suite-helpers
-version: 1.0.25-dev
+version: 1.0.26-dev
 groups: shared
 warnOnImplicitThis: true