Skip to content

Commit 5d17b8c

Browse files
NapalysNapalys
committed
added change notes
1 parent 83e1c69 commit 5d17b8c

File tree

9 files changed

+162
-0
lines changed

9 files changed

+162
-0
lines changed

‎cpp/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `userInputArgument` predicate and its convenience accessor from the `Security.qll`.
5+
* Deleted the deprecated `userInputReturned` predicate and its convenience accessor from the `Security.qll`.
6+
* Deleted the deprecated `userInputReturn` predicate from the `Security.qll`.
7+
* Deleted the deprecated `isUserInput` predicate and its convenience accessor from the `Security.qll`.
8+
* Deleted the deprecated `userInputArgument` predicate from the `SecurityOptions.qll`.
9+
* Deleted the deprecated `userInputReturned` predicate from the `SecurityOptions.qll`.

‎csharp/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `CollectionExpr` class from the `Guards.qll`.
5+
* Deleted the deprecated `ParameterPosition` class from the `FlowSummary.qll`.
6+
* Deleted the deprecated `ArgumentPosition` class from the `FlowSummary.qll`.
7+
* Deleted the deprecated `SummaryComponent` class from the `FlowSummary.qll`.
8+
* Deleted the deprecated `SummaryComponent` module from the `FlowSummary.qll`.
9+
* Deleted the deprecated `SummaryComponentStack` class from the `FlowSummary.qll`.
10+
* Deleted the deprecated `SummaryComponentStack` module from the `FlowSummary.qll`.
11+
* Deleted the deprecated `RequiredSummaryComponentStack` class from the `FlowSummary.qll`.
12+
* Deleted the deprecated `isCapturedVariableDefinitionFlowIn` predicate from the `SSA.qll`.
13+
* Deleted the deprecated `isCapturedVariableDefinitionFlowOut` predicate from the `SSA.qll`.
14+
* Deleted the deprecated `hasLocationInfo` predicate from the `DataFlowPublic.qll`.
15+
* Deleted the deprecated `Remote` import from the `InsecureDirectObjectReferenceQuery.qll`.
16+
* Deleted the deprecated `RemoteSource` class from the `CodeInjectionQuery.qll`, use `ThreatModelSource` instead.
17+
* Deleted the deprecated `LocalSource` class from the `CodeInjectionQuery.qll`, use `ThreatModelSource` instead.
18+
* Deleted the deprecated `RemoteSource` class from the `CommandInjectionQuery.qll` use `ThreatModelSource` instead.
19+
* Deleted the deprecated `RemoteSource` class from the `ConditionalBypassQuery.qll` use `ThreatModelSource` instead.
20+
* Deleted the deprecated `RemoteSource` class from the `LDAPInjectionQuery.qll` use `ThreatModelSource` instead.
21+
* Deleted the deprecated `RemoteSource` class from the `MissingXMLValidationQuery.qll` use `ActiveThreatModelSource` instead.
22+
* Deleted the deprecated `RemoteSource` class from the `ReDoSQuery.qll` use `ThreatModelSource` instead.
23+
* Deleted the deprecated `RemoteSource` class from the `RegexInjectionQuery.qll` use `ThreatModelSource` instead.
24+
* Deleted the deprecated `RemoteSource` class from the `ResourceInjectionQuery.qll` use `ThreatModelSource` instead.
25+
* Deleted the deprecated `LocalSource` class from the `ResourceInjectionQuery.qll` use `ThreatModelSource` instead.
26+
* Deleted the deprecated `RemoteSource` class from the `SqlInjectionQuery.qll` use `ThreatModelSource` instead.
27+
* Deleted the deprecated `LocalSource` class from the `SqlInjectionQuery.qll` use `ThreatModelSource` instead.
28+
* Deleted the deprecated `RemoteSource` class from the `TaintedPathQuery.qll` use `ThreatModelSource` instead.
29+
* Deleted the deprecated `RemoteSource` class from the `UrlRedirectQuery.qll` use `ThreatModelSource` instead.
30+
* Deleted the deprecated `RemoteSource` class from the `XPathInjectionQuery.qll` use `ThreatModelSource` instead.
31+
* Deleted the deprecated `ORMMappedProperty` class from the `Stored.qll` use `EntityFramework::StoredFlowSource` and `NHibernate::StoredFlowSource` instead.
32+

‎go/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `SummaryComponent` class from the `FlowSummary.qll`.
5+
* Deleted the deprecated `SummaryComponentStack` class from the `FlowSummary.qll`.
6+
* Deleted the deprecated `SummaryComponent` module from the `FlowSummary.qll`.
7+
* Deleted the deprecated `SummaryComponentStack` module from the `FlowSummary.qll`.
8+
* Deleted the deprecated `RequiredSummaryComponentStack` class from the `FlowSummary.qll`.
9+
* Deleted the deprecated `AppenderOrSprinter` class from the `Fmt.qll`.

‎java/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `SummaryComponent` class from the `FlowSummary.qll`.
5+
* Deleted the deprecated `SummaryComponentStack` class from the `FlowSummary.qll`.
6+
* Deleted the deprecated `SummaryComponent` module from the `FlowSummary.qll`.
7+
* Deleted the deprecated `SummaryComponentStack` module from the `FlowSummary.qll`.
8+
* Deleted the deprecated `RequiredSummaryComponentStack` class from the `FlowSummary.qll`.

‎javascript/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 70 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,70 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `getImportAssertion` predicate from the `ImportDeclaration` class, use `getImportAttributes` instead.
5+
* Deleted the deprecated `getImportAssertion` predicate from the `ExportDeclaration` class, use `getImportAttributes` instead.
6+
* Deleted the deprecated `getImportAttributes` predicate from the `DynamicImportExpr` class, use `getImportOptions` instead.
7+
* Deleted the deprecated `Configuration` class from the `BrokenCryptoAlgorithmQuery.qll`, use the `BrokenCryptoAlgorithmFlow` module instead.
8+
* Deleted the deprecated `Configuration` class from the `BuildArtifactLeakQuery.qll`, use the `BuildArtifactLeakFlow` module instead.
9+
* Deleted the deprecated `getLabel` predicate from the `CleartextLoggingCustomizations.qll`.
10+
* Deleted the deprecated `getLabel` predicate from the `Sink` class.
11+
* Deleted the deprecated `isSanitizerEdge` predicate from the `CleartextLoggingCustomizations.qll`, use `Barrier` instead, sanitized have been replaced by sanitized nodes.
12+
* Deleted the deprecated `Configuration` class from the `CleartextLoggingQuery.qll`, use the `CleartextLoggingFlow` module instead.
13+
* Deleted the deprecated `Configuration` class from the `CleartextStorageQuery.qll`, use the `ClearTextStorageFlow` module instead.
14+
* Deleted the deprecated `Configuration` class from the `ClientSideRequestForgeryQuery.qll`, use the `ClientSideRequestForgeryFlow` module instead.
15+
* Deleted the deprecated `Configuration` class from the `ClientSideUrlRedirectQuery.qll`.
16+
* Deleted the deprecated `Configuration` class from the `CodeInjectionQuery.qll`, use the `CodeInjectionFlow` module instead.
17+
* Deleted the deprecated `Configuration` class from the `CommandInjectionQuery.qll`, use the `CommandInjectionFlow` module instead.
18+
* Deleted the deprecated `Configuration` class from the `ConditionalBypassQuery.qll`, use the `ConditionalBypassFlow` module instead.
19+
* Deleted the deprecated `Configuration` class from the `CorsMisconfigurationForCredentialsQuery.qll`, use the `CorsMisconfigurationFlow` module instead.
20+
* Deleted the deprecated `Configuration` class from the `DeepObjectResourceExhaustionQuery.qll`, use the `DeepObjectResourceExhaustionFlow` module instead.
21+
* Deleted the deprecated `isOptionallySanitizedEdge` predicate from the `DomBasedXssCustomizations.qll`, use the `isOptionallySanitizedNode` module instead.
22+
* Deleted the deprecated `Configuration` class from the `DomBasedXssQuery.qll`, use the `DomBasedXssFlow` module instead.
23+
* Deleted the deprecated `Configuration` class from the `ExceptionXssQuery.qll`, use the `ExceptionXssFlow` module instead.
24+
* Deleted the deprecated `Configuration` class from the `ExternalAPIUsedWithUntrustedDataQuery.qll`, use the `ExternalAPIUsedWithUntrustedDataFlow` module instead.
25+
* Deleted the deprecated `Configuration` class from the `FileAccessToHttpQuery.qll`, use the `FileAccessToHttpFlow` module instead.
26+
* Deleted the deprecated `Configuration` class from the `HardcodedCredentialsQuery.qll`, use the `HardcodedCredentials` module instead.
27+
* Deleted the deprecated `Configuration` class from the `HardcodedDataInterpretedAsCodeQuery.qll`, use the `HardcodedDataInterpretedAsCodeFlow` module instead.
28+
* Deleted the deprecated `Configuration` class from the `HostHeaderPoisoningInEmailGenerationQuery.qll`, use the `HostHeaderPoisoningFlow` module instead.
29+
* Deleted the deprecated `Configuration` class from the `HttpToFileAccessQuery.qll`, use the `HttpToFileAccessFlow` module instead.
30+
* Deleted the deprecated `Configuration` class from the `ImproperCodeSanitizationQuery.qll`, use the `ImproperCodeSanitizationFlow` module instead.
31+
* Deleted the deprecated `Configuration` class from the `IncompleteHtmlAttributeSanitizationQuery.qll`, use the `IncompleteHtmlAttributeSanitizationFlow` module instead.
32+
* Deleted the deprecated `Configuration` class from the `IndirectCommandInjectionQuery.qll`, use the `IndirectCommandInjectionFlow` module instead.
33+
* Deleted the deprecated `Configuration` class from the `InsecureDownloadQuery.qll`, use the `InsecureDownload` module instead.
34+
* Deleted the deprecated `Configuration` class from the `InsecureRandomnessQuery.qll`, use the `InsecureRandomnessFlow` module instead.
35+
* Deleted the deprecated `Configuration` class from the `InsufficientPasswordHashQuery.qll`, use the `InsufficientPasswordHashFlow` module instead.
36+
* Deleted the deprecated `Configuration` class from the `LogInjectionQuery.qll`, use the `LogInjectionFlow` module instead.
37+
* Deleted the deprecated `Configuration` class from the `LoopBoundInjectionQuery.qll`, use the `LoopBoundInjectionFlow` module instead.
38+
* Deleted the deprecated `Configuration` class from the `NosqlInjectionQuery.qll`, use the `NosqlInjectionFlow` module instead.
39+
* Deleted the deprecated `Configuration` class from the `PostMessageStarQuery.qll`, use the `PostMessageStarFlow` module instead.
40+
* Deleted the deprecated `Configuration` class from the `PrototypePollutingAssignmentQuery.qll`, use the `PrototypePollutingAssignmentFlow` module instead.
41+
* Deleted the deprecated `Configuration` class from the `PrototypePollutionQuery.qll`, use the `PrototypePollutionFlow` module instead.
42+
* Deleted the deprecated `Configuration` class from the `RegExpInjectionQuery.qll`, use the `RegExpInjectionFlow` module instead.
43+
* Deleted the deprecated `Configuration` class from the `RemotePropertyInjectionQuery.qll`, use the `RemotePropertyInjectionFlow` module instead.
44+
* Deleted the deprecated `Configuration` class from the `RequestForgeryQuery.qll`, use the `RequestForgeryFlow` module instead.
45+
* Deleted the deprecated `Configuration` class from the `ResourceExhaustionQuery.qll`, use the `ResourceExhaustionFlow` module instead.
46+
* Deleted the deprecated `Configuration` class from the `SecondOrderCommandInjectionQuery.qll`, use the `SecondOrderCommandInjectionFlow` module instead.
47+
* Deleted the deprecated `Configuration` class from the `ShellCommandInjectionFromEnvironmentQuery.qll`, use the `ShellCommandInjectionFromEnvironmentFlow` module instead.
48+
* Deleted the deprecated `Configuration` class from the `SqlInjectionQuery.qll`, use the `SqlInjectionFlow` module instead.
49+
* Deleted the deprecated `Configuration` class from the `StackTraceExposureQuery.qll`, use the `StackTraceExposureFlow` module instead.
50+
* Deleted the deprecated `Configuration` class from the `StoredXssQuery.qll`, use the `StoredXssFlow` module instead.
51+
* Deleted the deprecated `Configuration` class from the `TaintedFormatStringQuery.qll`, use the `TaintedFormatStringFlow` module instead.
52+
* Deleted the deprecated `BarrierGuardNode` class from the `TaintedPathCustomizations.qll`.
53+
* Deleted the deprecated `Configuration` class from the `TaintedPathQuery.qll`, use the `TaintedPathFlow` module instead.
54+
* Deleted the deprecated `Configuration` class from the `TemplateObjectInjectionQuery.qll`, use the `TemplateObjInjectionConfig` module instead.
55+
* Deleted the deprecated `Configuration` class from the `TypeConfusionThroughParameterTamperingQuery.qll`, use the `TypeConfusionFlow` module instead.
56+
* Deleted the deprecated `Configuration` class from the `UnsafeCodeConstruction.qll`, use the `UnsafeCodeConstructionFlow` module instead.
57+
* Deleted the deprecated `Configuration` class from the `UnsafeDeserializationQuery.qll`, use the `UnsafeDeserializationFlow` module instead.
58+
* Deleted the deprecated `Configuration` class from the `UnsafeDynamicMethodAccessQuery.qll`, use the `UnsafeDynamicMethodAccessFlow` module instead.
59+
* Deleted the deprecated `Configration` class from the `UnsafeHtmlConstructionQuery.qll`.
60+
* Deleted the deprecated `Configuration` class from the `UnsafeJQueryPluginQuery.qll`, use the `UnsafeJQueryPluginFlow` module instead.
61+
* Deleted the deprecated `Configuration` class from the `UnsafeShellCommandConstructionQuery.qll`, use the `UnsafeShellCommandConstructionFlow` module instead.
62+
* Deleted the deprecated `sanitizes` predicate from the `UnvalidatedDynamicMethodCallCustomizations.qll`.
63+
* Deleted the deprecated `Configuration` class from the `UnvalidatedDynamicMethodCallQuery.qll`, use the `UnvalidatedDynamicMethodCallFlow` module instead.
64+
* Deleted the deprecated `Configuration` class from the `XmlBombQuery.qll`, use the `XmlBombFlow` module instead.
65+
* Deleted the deprecated `Configuration` class from the `XpathInjectionQuery.qll`, use the `XpathInjectionFlow` module instead.
66+
* Deleted the deprecated `Configuration` class from the `XssThroughDomQuery.qll`, use the `XssThroughDomFlow` module instead.
67+
* Deleted the deprecated `Configuration` class from the `XxeQuery.qll`, use the `XxeFlow` module instead.
68+
* Deleted the deprecated `Configuration` class from the `ZipSlipQuery.qll`.
69+
* Deleted the deprecated `Configuration` class from the `PolynomialReDoSQuery.qll`, use the `PolynomialReDoSFlow` module instead.
70+
* Deleted the deprecated `Configuration` class from the `SSRF.qll`, use the `SsrfFlow` module instead.

‎python/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `SummaryComponent` class from the `FlowSummary.qll`.
5+
* Deleted the deprecated `SummaryComponentStack` class from the `FlowSummary.qll`.
6+
* Deleted the deprecated `SummaryComponent` module from the `FlowSummary.qll`.
7+
* Deleted the deprecated `SummaryComponentStack` module from the `FlowSummary.qll`.
8+
* Deleted the deprecated `propagatesFlowExt` predicate from the `FlowSummary.qll`, use `propagatesFlow` instead.
9+
* Deleted the deprecated `RequiredSummaryComponentStack` class from the `FlowSummary.qll`.

‎ruby/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `SummaryComponent` class from the `FlowSummary.qll`.
5+
* Deleted the deprecated `SummaryComponentStack` class from the `FlowSummary.qll`.
6+
* Deleted the deprecated `SummaryComponent` module from the `FlowSummary.qll`.
7+
* Deleted the deprecated `SummaryComponentStack` module from the `FlowSummary.qll`.
8+
* Deleted the deprecated `propagatesFlowExt` predicate from the `FlowSummary.qll`, use `propagatesFlow` instead.
9+
* Deleted the deprecated `RequiredSummaryComponentStack` class from the `FlowSummary.qll`.
10+
* Deleted the deprecated `hasLocationInfo` predicate from the `DataFlowPublic.qll`.

‎shared/dataflow/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `hasLocationInfo` predicate from the `DataFlow.qll`.
5+
* Deleted the deprecated `FlowStateString` module from the `DataFlowImplCommon.qll`, use `FlowState` type instead.

‎swift/ql/lib/change-notes/2025-05-18-2025-May-outdated-deprecations.md‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
category: breaking
3+
---
4+
* Deleted the deprecated `parseContent` predicate from the `ExternalFlow.qll`.
5+
* Deleted the deprecated `hasLocationInfo` predicate from the `DataFlowPublic.qll`.
6+
* Deleted the deprecated `SummaryComponent` class from the `FlowSummary.qll`.
7+
* Deleted the deprecated `SummaryComponentStack` class from the `FlowSummary.qll`.
8+
* Deleted the deprecated `SummaryComponent` module from the `FlowSummary.qll`.
9+
* Deleted the deprecated `SummaryComponentStack` module from the `FlowSummary.qll`.
10+
* Deleted the deprecated `RequiredSummaryComponentStack` class from the `FlowSummary.qll`.

0 commit comments

Comments
 (0)