From e260194d76cec48910b90d3c1b499dbaf191e49f Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Fri, 4 Nov 2022 17:05:58 +0000 Subject: [PATCH 1/5] Update changelog for v2.1.31 --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f2d1bdbf9..50f35f215 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # CodeQL Action Changelog -## [UNRELEASED] +## 2.1.31 - 04 Nov 2022 No user facing changes. From 29a5553722da790f56e30f0d857768d6e7b6475c Mon Sep 17 00:00:00 2001 From: Andrew Eisenberg Date: Fri, 4 Nov 2022 10:14:36 -0700 Subject: [PATCH 2/5] Update CHANGELOG.md Add message about `rb/weak-cryptographic-algorithm`. --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 50f35f215..e192ff50c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,7 @@ ## 2.1.31 - 04 Nov 2022 -No user facing changes. +- The `rb/weak-cryptographic-algorithm` Ruby query has been updated to no longer report uses of hash functions such as `MD5` and `SHA1` even if they are known to be weak. These hash algorithms are used very often in non-sensitive contexts, making the query too imprecise in practice. [#1344](https://github.com/github/codeql-action/pull/1344) ## 2.1.30 - 02 Nov 2022 From 8aa42f1f11ad8b239dd7a05e6f6508a9ba42be8c Mon Sep 17 00:00:00 2001 From: Andrew Eisenberg Date: Fri, 4 Nov 2022 10:19:29 -0700 Subject: [PATCH 3/5] Update CHANGELOG.md Add link to codeql PR. --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e192ff50c..fbbe6cc2c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,7 @@ ## 2.1.31 - 04 Nov 2022 -- The `rb/weak-cryptographic-algorithm` Ruby query has been updated to no longer report uses of hash functions such as `MD5` and `SHA1` even if they are known to be weak. These hash algorithms are used very often in non-sensitive contexts, making the query too imprecise in practice. [#1344](https://github.com/github/codeql-action/pull/1344) +- The `rb/weak-cryptographic-algorithm` Ruby query has been updated to no longer report uses of hash functions such as `MD5` and `SHA1` even if they are known to be weak. These hash algorithms are used very often in non-sensitive contexts, making the query too imprecise in practice. For more information, see the corresponding change in the [github/codeql repository](https://github.com/github/codeql/pull/11129). [#1344](https://github.com/github/codeql-action/pull/1344) ## 2.1.30 - 02 Nov 2022 From 6a5e69e74f0f319fbc72ac8ff3af6f13290502d5 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Fri, 4 Nov 2022 20:36:31 +0000 Subject: [PATCH 4/5] Update changelog and version after v2.1.31 --- CHANGELOG.md | 4 ++++ package-lock.json | 4 ++-- package.json | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fbbe6cc2c..c44efea7f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ # CodeQL Action Changelog +## [UNRELEASED] + +No user facing changes. + ## 2.1.31 - 04 Nov 2022 - The `rb/weak-cryptographic-algorithm` Ruby query has been updated to no longer report uses of hash functions such as `MD5` and `SHA1` even if they are known to be weak. These hash algorithms are used very often in non-sensitive contexts, making the query too imprecise in practice. For more information, see the corresponding change in the [github/codeql repository](https://github.com/github/codeql/pull/11129). [#1344](https://github.com/github/codeql-action/pull/1344) diff --git a/package-lock.json b/package-lock.json index b40dca944..478fb9369 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "codeql", - "version": "2.1.31", + "version": "2.1.32", "lockfileVersion": 2, "requires": true, "packages": { "": { "name": "codeql", - "version": "2.1.31", + "version": "2.1.32", "license": "MIT", "dependencies": { "@actions/artifact": "^1.1.0", diff --git a/package.json b/package.json index ceab0b609..7a7124fde 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "codeql", - "version": "2.1.31", + "version": "2.1.32", "private": true, "description": "CodeQL action", "scripts": { From 31a2afec21fc30645f6a6616f206b5698f3ca6f6 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Fri, 4 Nov 2022 23:01:51 +0000 Subject: [PATCH 5/5] Update checked-in dependencies --- node_modules/.package-lock.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/node_modules/.package-lock.json b/node_modules/.package-lock.json index e842dff7f..37d666e71 100644 --- a/node_modules/.package-lock.json +++ b/node_modules/.package-lock.json @@ -1,6 +1,6 @@ { "name": "codeql", - "version": "2.1.31", + "version": "2.1.32", "lockfileVersion": 2, "requires": true, "packages": {