From 813d4639ca0530a0288dc5a8afaf5b9a899357b8 Mon Sep 17 00:00:00 2001 From: Jon Janego Date: Thu, 29 Jan 2026 16:18:21 -0600 Subject: [PATCH 1/3] Fix typo in taint flow model for urllib.parse --- python/ql/lib/change-notes/released/6.0.0.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/ql/lib/change-notes/released/6.0.0.md b/python/ql/lib/change-notes/released/6.0.0.md index 57de62fb2580..6957b864ed54 100644 --- a/python/ql/lib/change-notes/released/6.0.0.md +++ b/python/ql/lib/change-notes/released/6.0.0.md @@ -15,6 +15,6 @@ * When a code-scanning configuration specifies the `paths:` and/or `paths-ignore:` settings, these are now taken into account by the Python extractor's search for YAML files. * The `compression.zstd` library (added in Python 3.14) is now supported by the `py/decompression-bomb` query. -* Added taint flow model and type model for `urllib.parseurl`. +* Added taint flow model and type model for `urllib.parse`. * Remote flow sources for the `python-socketio` package have been modeled. * Additional models for remote flow sources for `tornado.websocket.WebSocketHandler` have been added. From e54d7c7c73934680656d6b78b29aa09566082356 Mon Sep 17 00:00:00 2001 From: Jon Janego Date: Thu, 29 Jan 2026 16:20:25 -0600 Subject: [PATCH 2/3] Update CHANGELOG.md --- python/ql/lib/CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/ql/lib/CHANGELOG.md b/python/ql/lib/CHANGELOG.md index c1cb74c2e310..ee4f1b529e36 100644 --- a/python/ql/lib/CHANGELOG.md +++ b/python/ql/lib/CHANGELOG.md @@ -15,7 +15,7 @@ * When a code-scanning configuration specifies the `paths:` and/or `paths-ignore:` settings, these are now taken into account by the Python extractor's search for YAML files. * The `compression.zstd` library (added in Python 3.14) is now supported by the `py/decompression-bomb` query. -* Added taint flow model and type model for `urllib.parseurl`. +* Added taint flow model and type model for `urllib.parse`. * Remote flow sources for the `python-socketio` package have been modeled. * Additional models for remote flow sources for `tornado.websocket.WebSocketHandler` have been added. From f14ccd8c81db0e668757ad8ee9d9bedade117e44 Mon Sep 17 00:00:00 2001 From: Jon Janego Date: Thu, 29 Jan 2026 16:21:14 -0600 Subject: [PATCH 3/3] Fix typo in taint flow model for urllib.parse --- .../codeql-overview/codeql-changelog/codeql-cli-2.24.0.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.24.0.rst b/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.24.0.rst index 7a11a32f3eac..9c228de1fc25 100644 --- a/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.24.0.rst +++ b/docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.24.0.rst @@ -183,7 +183,7 @@ Python * When a code-scanning configuration specifies the :code:`paths:` and/or :code:`paths-ignore:` settings, these are now taken into account by the Python extractor's search for YAML files. * The :code:`compression.zstd` library (added in Python 3.14) is now supported by the :code:`py/decompression-bomb` query. -* Added taint flow model and type model for :code:`urllib.parseurl`. +* Added taint flow model and type model for :code:`urllib.parse`. * Remote flow sources for the :code:`python-socketio` package have been modeled. * Additional models for remote flow sources for :code:`tornado.websocket.WebSocketHandler` have been added.