chore: bump pinned CodeQL CLI to v2.24.3 and release v0.5.0 (#179)

* chore: bump pinned CodeQL CLI to v2.24.3 and release v0.5.0

* fix: update Java and Python queries for CodeQL 2.24.3 API changes

- java/src/library_sources/ExternalAPIs.qll: rename applyManualModel()
  to hasManualModel() on SummarizedCallable (method was removed in
  java-all 8.1.1)
- python/lib/ghsl/MassAssignment.qll: replace deprecated Value type and
  CallNode with DataFlow::MethodCallNode (Value is no longer re-exported
  from python.qll in python-all 7.0.0)

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>

---------

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Author: 3 people

.codeqlversion

@@ -1 +1 @@
-2.23.9
+2.24.3

.release.yml

@@ -1,6 +1,6 @@
 name: "CodeQL Community Packs"
 repository: "githubsecuritylab/codeql-community-packs"
-version: "0.4.0"
+version: "0.5.0"
 prerelease: false
 
 ecosystem: CodeQL

cpp/lib/codeql-pack.lock.yml

@@ -2,27 +2,27 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/controlflow:
-    version: 2.0.23
+    version: 2.0.27
   codeql/cpp-all:
-    version: 6.1.4
+    version: 8.0.0
   codeql/dataflow:
-    version: 2.0.23
+    version: 2.0.27
   codeql/mad:
-    version: 1.0.39
+    version: 1.0.43
   codeql/quantum:
-    version: 0.0.17
+    version: 0.0.21
   codeql/rangeanalysis:
-    version: 1.0.39
+    version: 1.0.43
   codeql/ssa:
-    version: 2.0.15
+    version: 2.0.19
   codeql/tutorial:
-    version: 1.0.39
+    version: 1.0.43
   codeql/typeflow:
-    version: 1.0.39
+    version: 1.0.43
   codeql/typetracking:
-    version: 2.0.23
+    version: 2.0.27
   codeql/util:
-    version: 2.0.26
+    version: 2.0.30
   codeql/xml:
-    version: 1.0.39
+    version: 1.0.43
 compiled: false

cpp/lib/qlpack.yml

@@ -1,5 +1,5 @@
 library: true 
 name: githubsecuritylab/codeql-cpp-libs
-version: 0.4.0
+version: 0.5.0
 dependencies:
-  codeql/cpp-all: '6.1.4'
+  codeql/cpp-all: '8.0.0'

cpp/src/codeql-pack.lock.yml

@@ -2,31 +2,31 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/controlflow:
-    version: 2.0.23
+    version: 2.0.27
   codeql/cpp-all:
-    version: 6.1.4
+    version: 8.0.0
   codeql/cpp-queries:
-    version: 1.5.8
+    version: 1.5.12
   codeql/dataflow:
-    version: 2.0.23
+    version: 2.0.27
   codeql/mad:
-    version: 1.0.39
+    version: 1.0.43
   codeql/quantum:
-    version: 0.0.17
+    version: 0.0.21
   codeql/rangeanalysis:
-    version: 1.0.39
+    version: 1.0.43
   codeql/ssa:
-    version: 2.0.15
+    version: 2.0.19
   codeql/suite-helpers:
-    version: 1.0.39
+    version: 1.0.43
   codeql/tutorial:
-    version: 1.0.39
+    version: 1.0.43
   codeql/typeflow:
-    version: 1.0.39
+    version: 1.0.43
   codeql/typetracking:
-    version: 2.0.23
+    version: 2.0.27
   codeql/util:
-    version: 2.0.26
+    version: 2.0.30
   codeql/xml:
-    version: 1.0.39
+    version: 1.0.43
 compiled: false

cpp/src/qlpack.yml

@@ -1,9 +1,9 @@
 library: false
 name: githubsecuritylab/codeql-cpp-queries
-version: 0.4.0
+version: 0.5.0
 suites: suites
 defaultSuiteFile: suites/cpp.qls
 dependencies:
-  codeql/cpp-all: '6.1.4'
-  codeql/cpp-queries: '1.5.8'
+  codeql/cpp-all: '8.0.0'
+  codeql/cpp-queries: '1.5.12'
   githubsecuritylab/codeql-cpp-libs: '*'

cpp/test/codeql-pack.lock.yml

@@ -2,31 +2,31 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/controlflow:
-    version: 2.0.23
+    version: 2.0.27
   codeql/cpp-all:
-    version: 6.1.4
+    version: 8.0.0
   codeql/cpp-queries:
-    version: 1.5.8
+    version: 1.5.12
   codeql/dataflow:
-    version: 2.0.23
+    version: 2.0.27
   codeql/mad:
-    version: 1.0.39
+    version: 1.0.43
   codeql/quantum:
-    version: 0.0.17
+    version: 0.0.21
   codeql/rangeanalysis:
-    version: 1.0.39
+    version: 1.0.43
   codeql/ssa:
-    version: 2.0.15
+    version: 2.0.19
   codeql/suite-helpers:
-    version: 1.0.39
+    version: 1.0.43
   codeql/tutorial:
-    version: 1.0.39
+    version: 1.0.43
   codeql/typeflow:
-    version: 1.0.39
+    version: 1.0.43
   codeql/typetracking:
-    version: 2.0.23
+    version: 2.0.27
   codeql/util:
-    version: 2.0.26
+    version: 2.0.30
   codeql/xml:
-    version: 1.0.39
+    version: 1.0.43
 compiled: false

cpp/test/qlpack.yml

@@ -1,8 +1,8 @@
 name: githubsecurtylab/codeql-cpp-tests
 groups: [cpp, test]
 dependencies:
-    codeql/cpp-all: '6.1.4'
-    codeql/cpp-queries: '1.5.8'
+    codeql/cpp-all: '8.0.0'
+    codeql/cpp-queries: '1.5.12'
     githubsecuritylab/codeql-cpp-queries: '*'
     githubsecuritylab/codeql-cpp-libs: '*'
 extractor: cpp

csharp/ext-library-sources/qlpack.yml

@@ -1,8 +1,8 @@
 library: true
 name: githubsecuritylab/codeql-csharp-library-sources
-version: 0.4.0
+version: 0.5.0
 extensionTargets:
-  codeql/csharp-all: '5.4.4'
+  codeql/csharp-all: '5.4.8'
 dataExtensions:
   - 'manual/*.yml'
   - 'manual/**/*.yml'

csharp/ext/qlpack.yml

@@ -1,8 +1,8 @@
 library: true
 name: githubsecuritylab/codeql-csharp-extensions
-version: 0.4.0
+version: 0.5.0
 extensionTargets:
-  codeql/csharp-all: '5.4.4'
+  codeql/csharp-all: '5.4.8'
 dataExtensions:
   - 'manual/*.yml'
   - 'manual/**/*.yml'