chore: bump pinned CodeQL CLI to v2.27.2 and release v0.8.2 (#236)

* chore: bump pinned CodeQL CLI to v2.27.2 and release v0.8.2

* Update Go provenance test expectation

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>

---------

Co-authored-by: felickz <1760475+felickz@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Author: 3 people

.codeqlversion

@@ -1 +1 @@
-2.27.1
+2.27.2

.release.yml

@@ -1,6 +1,6 @@
 name: "CodeQL Community Packs"
 repository: "githubsecuritylab/codeql-community-packs"
-version: "0.8.1"
+version: "0.8.2"
 prerelease: false
 
 ecosystem: CodeQL

cpp/lib/codeql-pack.lock.yml

@@ -2,27 +2,29 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/controlflow:
-    version: 2.0.42
+    version: 2.0.43
   codeql/cpp-all:
-    version: 12.1.1
+    version: 12.2.0
   codeql/dataflow:
-    version: 2.1.14
+    version: 2.1.15
   codeql/mad:
-    version: 1.0.58
+    version: 1.0.59
   codeql/quantum:
-    version: 0.0.36
+    version: 0.0.37
   codeql/rangeanalysis:
-    version: 1.0.58
+    version: 1.0.59
+  codeql/regex:
+    version: 1.0.59
   codeql/ssa:
-    version: 2.0.34
+    version: 2.0.35
   codeql/tutorial:
-    version: 1.0.58
+    version: 1.0.59
   codeql/typeflow:
-    version: 1.0.58
+    version: 1.0.59
   codeql/typetracking:
-    version: 2.0.42
+    version: 2.0.43
   codeql/util:
-    version: 2.0.45
+    version: 2.0.46
   codeql/xml:
-    version: 1.0.58
+    version: 1.0.59
 compiled: false

cpp/lib/qlpack.yml

@@ -1,5 +1,5 @@
 library: true 
 name: githubsecuritylab/codeql-cpp-libs
-version: 0.8.1
+version: 0.8.2
 dependencies:
-  codeql/cpp-all: '12.1.1'
+  codeql/cpp-all: '12.2.0'

cpp/src/codeql-pack.lock.yml

@@ -2,31 +2,33 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/controlflow:
-    version: 2.0.42
+    version: 2.0.43
   codeql/cpp-all:
-    version: 12.1.1
+    version: 12.2.0
   codeql/cpp-queries:
-    version: 1.9.0
+    version: 1.9.1
   codeql/dataflow:
-    version: 2.1.14
+    version: 2.1.15
   codeql/mad:
-    version: 1.0.58
+    version: 1.0.59
   codeql/quantum:
-    version: 0.0.36
+    version: 0.0.37
   codeql/rangeanalysis:
-    version: 1.0.58
+    version: 1.0.59
+  codeql/regex:
+    version: 1.0.59
   codeql/ssa:
-    version: 2.0.34
+    version: 2.0.35
   codeql/suite-helpers:
-    version: 1.0.58
+    version: 1.0.59
   codeql/tutorial:
-    version: 1.0.58
+    version: 1.0.59
   codeql/typeflow:
-    version: 1.0.58
+    version: 1.0.59
   codeql/typetracking:
-    version: 2.0.42
+    version: 2.0.43
   codeql/util:
-    version: 2.0.45
+    version: 2.0.46
   codeql/xml:
-    version: 1.0.58
+    version: 1.0.59
 compiled: false

cpp/src/qlpack.yml

@@ -1,9 +1,9 @@
 library: false
 name: githubsecuritylab/codeql-cpp-queries
-version: 0.8.1
+version: 0.8.2
 suites: suites
 defaultSuiteFile: suites/cpp.qls
 dependencies:
-  codeql/cpp-all: '12.1.1'
-  codeql/cpp-queries: '1.9.0'
+  codeql/cpp-all: '12.2.0'
+  codeql/cpp-queries: '1.9.1'
   githubsecuritylab/codeql-cpp-libs: '*'

cpp/test/codeql-pack.lock.yml

@@ -2,31 +2,33 @@
 lockVersion: 1.0.0
 dependencies:
   codeql/controlflow:
-    version: 2.0.42
+    version: 2.0.43
   codeql/cpp-all:
-    version: 12.1.1
+    version: 12.2.0
   codeql/cpp-queries:
-    version: 1.9.0
+    version: 1.9.1
   codeql/dataflow:
-    version: 2.1.14
+    version: 2.1.15
   codeql/mad:
-    version: 1.0.58
+    version: 1.0.59
   codeql/quantum:
-    version: 0.0.36
+    version: 0.0.37
   codeql/rangeanalysis:
-    version: 1.0.58
+    version: 1.0.59
+  codeql/regex:
+    version: 1.0.59
   codeql/ssa:
-    version: 2.0.34
+    version: 2.0.35
   codeql/suite-helpers:
-    version: 1.0.58
+    version: 1.0.59
   codeql/tutorial:
-    version: 1.0.58
+    version: 1.0.59
   codeql/typeflow:
-    version: 1.0.58
+    version: 1.0.59
   codeql/typetracking:
-    version: 2.0.42
+    version: 2.0.43
   codeql/util:
-    version: 2.0.45
+    version: 2.0.46
   codeql/xml:
-    version: 1.0.58
+    version: 1.0.59
 compiled: false

cpp/test/qlpack.yml

@@ -1,8 +1,8 @@
 name: githubsecurtylab/codeql-cpp-tests
 groups: [cpp, test]
 dependencies:
-    codeql/cpp-all: '12.1.1'
-    codeql/cpp-queries: '1.9.0'
+    codeql/cpp-all: '12.2.0'
+    codeql/cpp-queries: '1.9.1'
     githubsecuritylab/codeql-cpp-queries: '*'
     githubsecuritylab/codeql-cpp-libs: '*'
 extractor: cpp

csharp/ext-library-sources/qlpack.yml

@@ -1,6 +1,6 @@
 library: true
 name: githubsecuritylab/codeql-csharp-library-sources
-version: 0.8.1
+version: 0.8.2
 # Keep this '*' (unconstrained) - never pin/floor it to a specific
 # codeql/csharp-all version. Unlike `dependencies:`, an unsatisfied
 # extensionTargets constraint doesn't fail loudly: it silently drops this

csharp/ext/qlpack.yml

@@ -1,6 +1,6 @@
 library: true
 name: githubsecuritylab/codeql-csharp-extensions
-version: 0.8.1
+version: 0.8.2
 # Keep this '*' (unconstrained) - never pin/floor it to a specific
 # codeql/csharp-all version. Unlike `dependencies:`, an unsatisfied
 # extensionTargets constraint doesn't fail loudly: it silently drops this