Releases: GitHubSecurityLab/CodeQL-Community-Packs
Release list
v0.7.5
Publish summary
Generated by publish.yml run #178 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ |  🆕 |
 🆕 |
n/a | n/a |
| C# |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| Go |  🆕 |
 🆕 |
 🆕 |
n/a |
| Java |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| JavaScript |  🆕 |
 🆕 |
n/a | n/a |
| Python |  🆕 |
[ ](https://github.com/GitHubSec... |
Contributors
Assets 2
v0.7.4
Publish summary
Generated by publish.yml run #177 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ |  🆕 |
 🆕 |
n/a | n/a |
| C# |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| Go |  🆕 |
 🆕 |
 🆕 |
n/a |
| Java |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| JavaScript |  🆕 |
 🆕 |
n/a | n/a |
| Python |  🆕 |
[ ](https://github.com/GitHubSec... |
Contributors
Assets 2
v0.7.3
Publish summary
Generated by publish.yml run #176 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ |  🆕 |
 🆕 |
n/a | n/a |
| C# |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| Go |  🆕 |
 🆕 |
 🆕 |
n/a |
| Java |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| JavaScript |  🆕 |
 🆕 |
n/a | n/a |
| Python |  🆕 |
[ ](https://github.com/GitHubSec... |
Contributors
Assets 2
v0.7.2
Publish summary
Generated by publish.yml run #175 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ |  🆕 |
 🆕 |
n/a | n/a |
| C# |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| Go |  🆕 |
 🆕 |
 🆕 |
❓ no result |
| Java |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| JavaScript |  🆕 |
 🆕 |
n/a | n/a |
| Python |  🆕 |
[ ](https://github.com/G... |
Contributors
Assets 2
v0.7.1
Publish summary
Generated by publish.yml run #174 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ |  🆕 |
 🆕 |
n/a | n/a |
| C# |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| Go |  🆕 |
 🆕 |
 🆕 |
n/a |
| Java |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| JavaScript |  🆕 |
 🆕 |
n/a | n/a |
| Python |  🆕 |
[ ](https://github.c... |
Contributors
Assets 2
v0.7.0
Publish summary
Generated by publish.yml run #173 — 🆕 marks a package republished by this run. Download counts are live (fetched by shields.io on each view, not stored here) and may take a little while to reflect the newest activity.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ |  🆕 |
 🆕 |
n/a | n/a |
| C# |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| Go |  🆕 |
 🆕 |
n/a | n/a |
| Java |  🆕 |
 🆕 |
 🆕 |
 🆕 |
| JavaScript |  🆕 |
 🆕 |
n/a | n/a |
| Python |  🆕 |
 🆕 |
n/a | n/a |
| Ruby | [ ](https... |
Contributors
Assets 2
v0.6.0
Publish summary
Generated by publish.yml run #172 — 🆕 marks a package republished by this run.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ | 0.6.0 🆕 | 0.6.0 🆕 | n/a | n/a |
| C# | 0.6.0 🆕 | 0.6.0 🆕 | 0.6.0 🆕 | 0.6.0 🆕 |
| Go | 0.6.0 🆕 | 0.6.0 🆕 | n/a | n/a |
| Java | 0.6.0 🆕 | 0.6.0 🆕 | 0.6.0 🆕 | 0.6.0 🆕 |
| JavaScript | 0.6.0 🆕 | 0.6.0 🆕 | n/a | n/a |
| Python | 0.6.0 🆕 | 0.6.0 🆕 | n/a | n/a |
| Ruby | 0.6.0 🆕 | 0.6.0 🆕 | n/a | n/a |
What's Changed
- chore: bump all pack versions to 0.5.1 by @felickz in #182
- ci: support full validation on workflow_dispatch (no PR context) by @felickz in #181
- chore: bump pinned CodeQL CLI to v2.25.6 and release v0.6.0 by @security-lab-bot[bot] in #183
Full Changelog: v0.5.1...v0.6.0
CodeQL standard library & query pack versions
Pinned CodeQL CLI/library version (.codeqlversion): v2.25.6
Comparing each language's direct codeql/* dependencies (from both src/qlpack.yml and lib/qlpack.yml, each resolved in its own codeql-pack.lock.yml) against the versions github/codeql itself ships for CLI v2.25.6 (tag codeql-cli/v2.25.6). src and lib are checked independently because they're separately-resolved lock files that can drift from each other. Each cell links to the exact file/line backing it - our side at the commit this table was generated from, upstream at the CLI tag - so the claim can be verified with one click. A mismatch means codeql pack upgrade <lang>/<pack> hasn't been run for that specific directory since the last .codeqlversion bump - see CONTRIBUTING.md: Updating the pinned CodeQL CLI/library version.
| Language | Pack | Dependency | Our locked version | Upstream (CLI v2.25.6 ships) | Status |
|---|---|---|---|---|---|
| C++ | src |
codeql/cpp-all |
10.2.0 |
10.2.0 |
✅ |
| C++ | src |
codeql/cpp-queries |
1.6.4 |
1.6.4 |
✅ |
| C++ | lib |
codeql/cpp-all |
10.2.0 |
10.2.0 |
✅ |
| C# | src |
codeql/csharp-all |
6.0.2 |
6.0.2 |
✅ |
| C# | src |
codeql/csharp-queries |
1.7.4 |
1.7.4 |
✅ |
| C# | lib |
codeql/csharp-all |
6.0.2 |
6.0.2 |
✅ |
| Go | src |
codeql/go-all |
7.1.2 |
7.1.2 |
✅ |
| Go | lib |
codeql/go-all |
7.1.2 |
7.1.2 |
✅ |
| Java | src |
codeql/java-all |
9.1.2 |
9.1.2 |
✅ |
| Java | lib |
codeql/java-all |
9.1.2 |
9.1.2 |
✅ |
| JavaScript | src |
codeql/javascript-all |
2.7.2 |
2.7.2 |
✅ |
| JavaScript | lib |
codeql/javascript-all |
2.7.2 |
2.7.2 |
✅ |
| Python | src |
codeql/python-all |
7.1.2 |
7.1.2 |
✅ |
| Python | lib |
codeql/python-all |
7.1.2 |
7.1.2 |
✅ |
| Ruby | src |
codeql/ruby-all |
5.2.2 |
5.2.2 |
✅ |
| Ruby | lib |
codeql/ruby-all |
5.2.2 |
5.2.2 |
✅ |
Contributors
Assets 2
v0.5.1
Publish summary
Generated by publish.yml run #169 — 🆕 marks a package republished by this run.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ | 0.5.0 | 0.5.0 | n/a | n/a |
| C# | 0.5.0 | 0.5.0 | 0.5.0 | 0.5.0 |
| Go | 0.5.0 | 0.5.0 | n/a | n/a |
| Java | 0.5.0 | 0.5.0 | 0.5.0 | 0.5.0 |
| JavaScript | 0.5.0 | 0.5.0 | n/a | n/a |
| Python | 0.5.0 | 0.5.0 | n/a | n/a |
| Ruby | 0.5.0 | 0.5.0 | n/a | n/a |
What's Changed
Full Changelog: v0.5.0...v0.5.1
CodeQL standard library & query pack versions
Pinned CodeQL CLI/library version (.codeqlversion): v2.24.3
Comparing each language's direct codeql/* dependencies (from both src/qlpack.yml and lib/qlpack.yml, each resolved in its own codeql-pack.lock.yml) against the versions github/codeql itself ships for CLI v2.24.3 (tag codeql-cli/v2.24.3). src and lib are checked independently because they're separately-resolved lock files that can drift from each other. Each cell links to the exact file/line backing it - our side at the commit this table was generated from, upstream at the CLI tag - so the claim can be verified with one click. A mismatch means codeql pack upgrade <lang>/<pack> hasn't been run for that specific directory since the last .codeqlversion bump - see CONTRIBUTING.md: Updating the pinned CodeQL CLI/library version.
| Language | Pack | Dependency | Our locked version | Upstream (CLI v2.24.3 ships) | Status |
|---|---|---|---|---|---|
| C++ | src |
codeql/cpp-all |
8.0.0 |
8.0.0 |
✅ |
| C++ | src |
codeql/cpp-queries |
1.5.12 |
1.5.12 |
✅ |
| C++ | lib |
codeql/cpp-all |
8.0.0 |
8.0.0 |
✅ |
| C# | src |
codeql/csharp-all |
5.4.8 |
5.4.8 |
✅ |
| C# | src |
codeql/csharp-queries |
1.6.3 |
1.6.3 |
✅ |
| C# | lib |
codeql/csharp-all |
5.4.8 |
5.4.8 |
✅ |
| Go | src |
codeql/go-all |
7.0.1 |
7.0.1 |
✅ |
| Go | lib |
codeql/go-all |
7.0.1 |
7.0.1 |
✅ |
| Java | src |
codeql/java-all |
8.1.1 |
8.1.1 |
✅ |
| Java | lib |
codeql/java-all |
8.1.1 |
8.1.1 |
✅ |
| JavaScript | src |
codeql/javascript-all |
2.6.23 |
2.6.23 |
✅ |
| JavaScript | lib |
codeql/javascript-all |
2.6.23 |
2.6.23 |
✅ |
| Python | src |
codeql/python-all |
7.0.0 |
7.0.0 |
✅ |
| Python | lib |
codeql/python-all |
7.0.0 |
7.0.0 |
✅ |
| Ruby | src |
codeql/ruby-all |
5.1.11 |
5.1.11 |
✅ |
| Ruby | lib |
codeql/ruby-all |
5.1.11 |
5.1.11 |
✅ |
Contributors
Assets 2
v0.5.0
Publish summary
Generated by publish.yml run #168 — 🆕 marks a package republished by this run.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ | 0.5.0 🆕 | 0.5.0 🆕 | n/a | n/a |
| C# | 0.5.0 🆕 | 0.5.0 🆕 | 0.5.0 🆕 | 0.5.0 🆕 |
| Go | 0.5.0 🆕 | 0.5.0 🆕 | n/a | n/a |
| Java | 0.5.0 🆕 | 0.5.0 🆕 | 0.5.0 🆕 | 0.5.0 🆕 |
| JavaScript | 0.5.0 🆕 | 0.5.0 🆕 | n/a | n/a |
| Python | 0.5.0 🆕 | 0.5.0 🆕 | n/a | n/a |
| Ruby | 0.5.0 🆕 | 0.5.0 🆕 | n/a | n/a |
What's Changed
- docs: retire hand-maintained CodeQL version table, point to GitHub Releases by @felickz in #178
- chore: bump pinned CodeQL CLI to v2.24.3 and release v0.5.0 by @security-lab-bot[bot] in #179
Full Changelog: v0.4.0...v0.5.0
CodeQL standard library & query pack versions
Pinned CodeQL CLI/library version (.codeqlversion): v2.24.3
Comparing each language's direct codeql/* dependencies (from both src/qlpack.yml and lib/qlpack.yml, each resolved in its own codeql-pack.lock.yml) against the versions github/codeql itself ships for CLI v2.24.3 (tag codeql-cli/v2.24.3). src and lib are checked independently because they're separately-resolved lock files that can drift from each other. Each cell links to the exact file/line backing it - our side at the commit this table was generated from, upstream at the CLI tag - so the claim can be verified with one click. A mismatch means codeql pack upgrade <lang>/<pack> hasn't been run for that specific directory since the last .codeqlversion bump - see CONTRIBUTING.md: Updating the pinned CodeQL CLI/library version.
| Language | Pack | Dependency | Our locked version | Upstream (CLI v2.24.3 ships) | Status |
|---|---|---|---|---|---|
| C++ | src |
codeql/cpp-all |
8.0.0 |
8.0.0 |
✅ |
| C++ | src |
codeql/cpp-queries |
1.5.12 |
1.5.12 |
✅ |
| C++ | lib |
codeql/cpp-all |
8.0.0 |
8.0.0 |
✅ |
| C# | src |
codeql/csharp-all |
5.4.8 |
5.4.8 |
✅ |
| C# | src |
codeql/csharp-queries |
1.6.3 |
1.6.3 |
✅ |
| C# | lib |
codeql/csharp-all |
5.4.8 |
5.4.8 |
✅ |
| Go | src |
codeql/go-all |
7.0.1 |
7.0.1 |
✅ |
| Go | lib |
codeql/go-all |
7.0.1 |
7.0.1 |
✅ |
| Java | src |
codeql/java-all |
8.1.1 |
8.1.1 |
✅ |
| Java | lib |
codeql/java-all |
8.1.1 |
8.1.1 |
✅ |
| JavaScript | src |
codeql/javascript-all |
2.6.23 |
2.6.23 |
✅ |
| JavaScript | lib |
codeql/javascript-all |
2.6.23 |
2.6.23 |
✅ |
| Python | src |
codeql/python-all |
7.0.0 |
7.0.0 |
✅ |
| Python | lib |
codeql/python-all |
7.0.0 |
7.0.0 |
✅ |
| Ruby | src |
codeql/ruby-all |
5.1.11 |
5.1.11 |
✅ |
| Ruby | lib |
codeql/ruby-all |
5.1.11 |
5.1.11 |
✅ |
Contributors
Assets 2
v0.4.0
Publish summary
Generated by publish.yml run #167 — 🆕 marks a package republished by this run.
| Language | Queries (src) |
Library (lib) |
Extensions (ext) |
Library sources (ext-library-sources) |
|---|---|---|---|---|
| C++ | 0.4.0 🆕 | 0.4.0 🆕 | n/a | n/a |
| C# | 0.4.0 🆕 | 0.4.0 🆕 | 0.4.0 🆕 | 0.4.0 🆕 |
| Go | 0.4.0 🆕 | 0.4.0 🆕 | n/a | n/a |
| Java | 0.4.0 🆕 | 0.4.0 🆕 | 0.4.0 🆕 | 0.4.0 🆕 |
| JavaScript | 0.4.0 🆕 | 0.4.0 🆕 | n/a | n/a |
| Python | 0.4.0 🆕 | 0.4.0 🆕 | n/a | n/a |
| Ruby | 0.4.0 🆕 | 0.4.0 🆕 | n/a | n/a |
What's Changed
- fix(release): invoke patch-release-me via docker run to avoid mode arg quoting bug by @felickz in #171
- feat(release): add prerelease boolean toggle, default off by @felickz in #172
- feat(ci): add copilot-setup-steps.yml for delegated CI-fix sessions by @felickz in #174
- fix(release): stop patch-release-me double-bumping ql/hotspots by @felickz in #175
- chore: bump pinned CodeQL CLI to v2.22.4 and release v0.3.0 by @security-lab-bot[bot] in #173
- chore(ci): pre-install every CodeQL pack's dependencies in copilot-setup-steps.yml by @felickz in #176
- chore: bump pinned CodeQL CLI to v2.23.9 and release v0.4.0 by @security-lab-bot[bot] in #177
Full Changelog: v0.2.4...v0.4.0
CodeQL standard library & query pack versions
Pinned CodeQL CLI/library version (.codeqlversion): v2.23.9
Comparing each language's direct codeql/* dependencies (from both src/qlpack.yml and lib/qlpack.yml, each resolved in its own codeql-pack.lock.yml) against the versions github/codeql itself ships for CLI v2.23.9 (tag codeql-cli/v2.23.9). src and lib are checked independently because they're separately-resolved lock files that can drift from each other. Each cell links to the exact file/line backing it - our side at the commit this table was generated from, upstream at the CLI tag - so the claim can be verified with one click. A mismatch means codeql pack upgrade <lang>/<pack> hasn't been run for that specific directory since the last .codeqlversion bump - see CONTRIBUTING.md: Updating the pinned CodeQL CLI/library version.
| Language | Pack | Dependency | Our locked version | Upstream (CLI v2.23.9 ships) | Status |
|---|---|---|---|---|---|
| C++ | src |
codeql/cpp-all |
6.1.4 |
6.1.4 |
✅ |
| C++ | src |
codeql/cpp-queries |
1.5.8 |
1.5.8 |
✅ |
| C++ | lib |
codeql/cpp-all |
6.1.4 |
6.1.4 |
✅ |
| C# | src |
codeql/csharp-all |
5.4.4 |
5.4.4 |
✅ |
| C# | src |
codeql/csharp-queries |
1.5.4 |
1.5.4 |
✅ |
| C# | lib |
codeql/csharp-all |
5.4.4 |
5.4.4 |
✅ |
| Go | src |
codeql/go-all |
5.0.6 |
5.0.6 |
✅ |
| Go | lib |
codeql/go-all |
5.0.6 |
5.0.6 |
✅ |
| Java | src |
codeql/java-all |
7.8.3 |
7.8.3 |
✅ |
| Java | lib |
codeql/java-all |
7.8.3 |
7.8.3 |
✅ |
| JavaScript | src |
codeql/javascript-all |
2.6.19 |
2.6.19 |
✅ |
| JavaScript | lib |
codeql/javascript-all |
2.6.19 |
2.6.19 |
✅ |
| Python | src |
codeql/python-all |
5.0.4 |
5.0.4 |
✅ |
| Python | lib |
codeql/python-all |
5.0.4 |
5.0.4 |
✅ |
| Ruby | src |
codeql/ruby-all |
5.1.7 |
5.1.7 |
✅ |
| Ruby | lib |
codeql/ruby-all |
[5.1.7](https://github.com/GitHubSecurityLab/CodeQL-Community-Packs/blob/e7c143a361584f0fd3584e7066503619a181b... |