Update changelog documentation site for codeql-cli-2.25.3#21785
Update changelog documentation site for codeql-cli-2.25.3#21785
Conversation
There was a problem hiding this comment.
Pull request overview
Synchronizes the rendered CodeQL changelog documentation site for the CodeQL CLI 2.25.3 release by adding the new release page and linking it from the changelog index.
Changes:
- Added a new changelog page for CodeQL CLI 2.25.3 with release notes across CLI, query packs, and language libraries.
- Updated the changelog index to include the 2.25.3 entry in the toctree.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| docs/codeql/codeql-overview/codeql-changelog/index.rst | Adds codeql-cli-2.25.3 to the changelog toctree so the new page is included in navigation. |
| docs/codeql/codeql-overview/codeql-changelog/codeql-cli-2.25.3.rst | Introduces the rendered changelog content for the 2.25.3 release. |
| * The "Multiplication result converted to larger type" (:code:`cpp/integer-multiplication-cast-to-long`) query has been upgraded to :code:`high` precision. This query will now run in the default code scanning suite. | ||
| * The "Suspicious add with sizeof" (:code:`cpp/suspicious-add-sizeof`) query has been upgraded to :code:`high` precision. This query will now run in the default code scanning suite. | ||
| * The "Wrong type of arguments to formatting function" (:code:`cpp/wrong-type-format-argument`) query has been upgraded to :code:`high` precision. This query will now run in the default code scanning suite. | ||
| * The "Implicit function declaration" (:code:`cpp/implicit-function-declaration`) query has been upgraded to :code:`high` precision. However, for :code:`build mode: none` databases, it no longer produces any results. The results in this mode were found to be very noisy and fundamentally imprecise. |
| GitHub Actions | ||
| """""""""""""" | ||
|
|
||
| * Fixed alert messages in :code:`actions/artifact-poisoning/critical` and :code:`actions/artifact-poisoning/medium` as they previously included a redundant placeholder in the alert message that would on occasion contain a long block of yml that makes the alert difficult to understand. Also improved the wording to make it clearer that it is not the artifact that is being poisoned, but instead a potentially untrusted artifact that is consumed. Finally, changed the alert location to be the source, to align more with other queries reporting an artifact (e.g. zipslip) which is more useful. |
|
QHelp previews: cpp/ql/src/Likely Bugs/Underspecified Functions/ImplicitFunctionDeclaration.qhelpImplicit function declarationA function is called without a prior function declaration or definition. When this happens, the compiler generates an implicit declaration of the function, specifying an integer return type and no parameters. If the implicit declaration does not match the true signature of the function, the function may behave unpredictably. This may indicate a misspelled function name, or that the required header containing the function declaration has not been included. Note: This query is not compatible with RecommendationProvide an explicit declaration of the function before invoking it. Example/* '#include <stdlib.h>' was forgotten */
int main(void) {
/* 'int malloc()' assumed */
unsigned char *p = malloc(100);
*p = 'a';
return 0;
}References
|
1 similar comment
|
QHelp previews: cpp/ql/src/Likely Bugs/Underspecified Functions/ImplicitFunctionDeclaration.qhelpImplicit function declarationA function is called without a prior function declaration or definition. When this happens, the compiler generates an implicit declaration of the function, specifying an integer return type and no parameters. If the implicit declaration does not match the true signature of the function, the function may behave unpredictably. This may indicate a misspelled function name, or that the required header containing the function declaration has not been included. Note: This query is not compatible with RecommendationProvide an explicit declaration of the function before invoking it. Example/* '#include <stdlib.h>' was forgotten */
int main(void) {
/* 'int malloc()' assumed */
unsigned char *p = malloc(100);
*p = 'a';
return 0;
}References
|
This pull request was automatically generated to synchronize the CodeQL changelog documentation based on recent changes to CodeQL.
Overview
Next Steps