chore: bump pinned CodeQL CLI to v2.22.4 and release v0.3.0 (#173)

* chore: bump pinned CodeQL CLI to v2.22.4 and release v0.3.0

* fix(python): remove removed semmle.python.concepts.internal.CryptoAlgorithmNames import for CodeQL 2.22.4 compatibility

* chore: revert unintended ql/hotspots version bump

ql/hotspots is intentionally excluded from the repo-wide version-sync
tooling (.release.yml's "CodeQL Pack Versions" location excludes
"ql/hotspots/" - see PR #158/d0b969e: it is a separate package
published by a manual workflow_dispatch with its own version input,
not part of the per-language pack family).

patch-release-me bumped it anyway. Root cause (verified via local
repro against the pinned image): our custom location's name
("CodeQL Pack Versions") doesn't match patch-release-me's own
built-in default location for the CodeQL ecosystem ("CodeQL Packs"),
so both run - and the built-in one has no idea about our exclude.
Separately, our own location's regex (^version:\s*{version}$) has
no multiline flag, so it never actually matches a real multi-line
qlpack.yml and has been dead code since it was added.

Reverting this one file back to 0.2.4 here; the actual .release.yml
fix (rename the location + add the multiline flag) is coming in a
separate PR so it stops happening on every future release bump.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Author: 3 people

.codeqlversion

@@ -1 +1 @@
-2.21.4
+2.22.4

.release.yml

@@ -1,6 +1,7 @@
 name: "CodeQL Community Packs"
 repository: "githubsecuritylab/codeql-community-packs"
-version: "0.2.4"
+version: "0.3.0"
+prerelease: false
 
 ecosystem: CodeQL
 excludes:

cpp/lib/codeql-pack.lock.yml

@@ -2,25 +2,25 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/cpp-all:
-    version: 5.0.0
+    version: 5.4.1
   codeql/dataflow:
-    version: 2.0.8
+    version: 2.0.13
   codeql/mad:
-    version: 1.0.24
+    version: 1.0.29
   codeql/quantum:
-    version: 0.0.2
+    version: 0.0.7
   codeql/rangeanalysis:
-    version: 1.0.24
+    version: 1.0.29
   codeql/ssa:
-    version: 2.0.0
+    version: 2.0.5
   codeql/tutorial:
-    version: 1.0.24
+    version: 1.0.29
   codeql/typeflow:
-    version: 1.0.24
+    version: 1.0.29
   codeql/typetracking:
-    version: 2.0.8
+    version: 2.0.13
   codeql/util:
-    version: 2.0.11
+    version: 2.0.16
   codeql/xml:
-    version: 1.0.24
+    version: 1.0.29
 compiled: false

cpp/lib/qlpack.yml

@@ -1,5 +1,5 @@
 library: true 
 name: githubsecuritylab/codeql-cpp-libs
-version: 0.2.4
+version: 0.3.0
 dependencies:
-  codeql/cpp-all: '5.0.0'
+  codeql/cpp-all: '5.4.1'

cpp/src/codeql-pack.lock.yml

@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/cpp-all:
-    version: 5.0.0
+    version: 5.4.1
   codeql/cpp-queries:
-    version: 1.4.1
+    version: 1.4.6
   codeql/dataflow:
-    version: 2.0.8
+    version: 2.0.13
   codeql/mad:
-    version: 1.0.24
+    version: 1.0.29
   codeql/quantum:
-    version: 0.0.2
+    version: 0.0.7
   codeql/rangeanalysis:
-    version: 1.0.24
+    version: 1.0.29
   codeql/ssa:
-    version: 2.0.0
+    version: 2.0.5
   codeql/suite-helpers:
-    version: 1.0.24
+    version: 1.0.29
   codeql/tutorial:
-    version: 1.0.24
+    version: 1.0.29
   codeql/typeflow:
-    version: 1.0.24
+    version: 1.0.29
   codeql/typetracking:
-    version: 2.0.8
+    version: 2.0.13
   codeql/util:
-    version: 2.0.11
+    version: 2.0.16
   codeql/xml:
-    version: 1.0.24
+    version: 1.0.29
 compiled: false

cpp/src/qlpack.yml

@@ -1,9 +1,9 @@
 library: false
 name: githubsecuritylab/codeql-cpp-queries
-version: 0.2.4
+version: 0.3.0
 suites: suites
 defaultSuiteFile: suites/cpp.qls
 dependencies:
-  codeql/cpp-all: '5.0.0'
-  codeql/cpp-queries: '1.4.1'
+  codeql/cpp-all: '5.4.1'
+  codeql/cpp-queries: '1.4.6'
   githubsecuritylab/codeql-cpp-libs: '*'

cpp/test/codeql-pack.lock.yml

@@ -2,29 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/cpp-all:
-    version: 5.0.0
+    version: 5.4.1
   codeql/cpp-queries:
-    version: 1.4.1
+    version: 1.4.6
   codeql/dataflow:
-    version: 2.0.8
+    version: 2.0.13
   codeql/mad:
-    version: 1.0.24
+    version: 1.0.29
   codeql/quantum:
-    version: 0.0.2
+    version: 0.0.7
   codeql/rangeanalysis:
-    version: 1.0.24
+    version: 1.0.29
   codeql/ssa:
-    version: 2.0.0
+    version: 2.0.5
   codeql/suite-helpers:
-    version: 1.0.24
+    version: 1.0.29
   codeql/tutorial:
-    version: 1.0.24
+    version: 1.0.29
   codeql/typeflow:
-    version: 1.0.24
+    version: 1.0.29
   codeql/typetracking:
-    version: 2.0.8
+    version: 2.0.13
   codeql/util:
-    version: 2.0.11
+    version: 2.0.16
   codeql/xml:
-    version: 1.0.24
+    version: 1.0.29
 compiled: false

cpp/test/qlpack.yml

@@ -1,8 +1,8 @@
 name: githubsecurtylab/codeql-cpp-tests
 groups: [cpp, test]
 dependencies:
-    codeql/cpp-all: '5.0.0'
-    codeql/cpp-queries: '1.4.1'
+    codeql/cpp-all: '5.4.1'
+    codeql/cpp-queries: '1.4.6'
     githubsecuritylab/codeql-cpp-queries: '*'
     githubsecuritylab/codeql-cpp-libs: '*'
 extractor: cpp

csharp/ext-library-sources/qlpack.yml

@@ -1,8 +1,8 @@
 library: true
 name: githubsecuritylab/codeql-csharp-library-sources
-version: 0.2.4
+version: 0.3.0
 extensionTargets:
-  codeql/csharp-all: '5.1.7'
+  codeql/csharp-all: '5.2.2'
 dataExtensions:
   - 'manual/*.yml'
   - 'manual/**/*.yml'

csharp/ext/qlpack.yml

@@ -1,8 +1,8 @@
 library: true
 name: githubsecuritylab/codeql-csharp-extensions
-version: 0.2.4
+version: 0.3.0
 extensionTargets:
-  codeql/csharp-all: '5.1.7'
+  codeql/csharp-all: '5.2.2'
 dataExtensions:
   - 'manual/*.yml'
   - 'manual/**/*.yml'