Post-release preparation for codeql-cli-2.21.1 #19317
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Corrects "know" to "known" in the description of the UnmaskedSecretExposure document.
…xposure actions: Fix spelling error in UnmaskedSecretExposure.md
Release preparation for version 2.21.1
igfoo
previously approved these changes
Apr 15, 2025
There was a problem hiding this comment.
Pull Request Overview
This PR prepares the codebase for the next release by merging back post-release changes from codeql-cli-2.21.1 and bumping version strings for several packs across the repository.
- Update last release versions and version strings in YAML files for C#, C++, and Actions queries.
- Add new release notes and update CHANGELOGs to document the version bumps.
- Fix a minor spelling issue in a security-related markdown file.
Reviewed Changes
Copilot reviewed 171 out of 171 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| csharp/ql/campaigns/Solorigate/lib/codeql-pack.release.yml | Bumps lastReleaseVersion from 1.7.37 to 1.7.38 |
| csharp/ql/campaigns/Solorigate/lib/change-notes/released/1.7.38.md | Adds release note for 1.7.38 |
| csharp/ql/campaigns/Solorigate/lib/CHANGELOG.md | Updates changelog with release note for 1.7.38 |
| cpp/ql/src/qlpack.yml | Updates version from 1.3.8-dev to 1.3.9-dev |
| cpp/ql/src/codeql-pack.release.yml | Updates lastReleaseVersion from 1.3.7 to 1.3.8 |
| cpp/ql/src/change-notes/released/1.3.8.md | Adds release note for 1.3.8 |
| cpp/ql/src/CHANGELOG.md | Updates changelog with release note for 1.3.8 |
| cpp/ql/lib/qlpack.yml | Updates version from 4.1.1-dev to 4.2.1-dev |
| cpp/ql/lib/codeql-pack.release.yml | Bumps lastReleaseVersion from 4.1.0 to 4.2.0 |
| cpp/ql/lib/change-notes/released/4.2.0.md | Adds new feature release notes for 4.2.0 |
| cpp/ql/lib/CHANGELOG.md | Updates changelog with release note for 4.2.0 |
| actions/ql/src/qlpack.yml | Updates version from 0.5.4-dev to 0.5.5-dev |
| actions/ql/src/codeql-pack.release.yml | Bumps lastReleaseVersion from 0.5.3 to 0.5.4 |
| actions/ql/src/change-notes/released/0.5.4.md | Adds bug fix release note for 0.5.4 |
| actions/ql/src/Security/CWE-312/UnmaskedSecretExposure.md | Fixes a spelling mistake in the description text |
| actions/ql/src/CHANGELOG.md | Updates changelog with release note for 0.5.4 |
| actions/ql/lib/qlpack.yml | Updates version from 0.4.7-dev to 0.4.8-dev |
| actions/ql/lib/codeql-pack.release.yml | Bumps lastReleaseVersion from 0.4.6 to 0.4.7 |
| actions/ql/lib/change-notes/released/0.4.7.md | Adds release note for 0.4.7 |
| actions/ql/lib/CHANGELOG.md | Updates changelog with release note for 0.4.7 |
Comments suppressed due to low confidence (1)
actions/ql/src/Security/CWE-312/UnmaskedSecretExposure.md:5
- The word 'know' was corrected to 'known'. Please verify that this correction aligns with the intended description.
Secrets derived from other secrets are not known to the workflow runner and therefore not masked unless explicitly registered.
igfoo
approved these changes
Apr 16, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR merges back all of the changes from the release of codeql-cli-2.21.1. And it bumps the version version strings in semmle-code in preparation for the next release of 2.21.2.