From 29a5553722da790f56e30f0d857768d6e7b6475c Mon Sep 17 00:00:00 2001 From: Andrew Eisenberg Date: Fri, 4 Nov 2022 10:14:36 -0700 Subject: [PATCH] Update CHANGELOG.md Add message about `rb/weak-cryptographic-algorithm`. --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 50f35f215e..e192ff50c3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,7 @@ ## 2.1.31 - 04 Nov 2022 -No user facing changes. +- The `rb/weak-cryptographic-algorithm` Ruby query has been updated to no longer report uses of hash functions such as `MD5` and `SHA1` even if they are known to be weak. These hash algorithms are used very often in non-sensitive contexts, making the query too imprecise in practice. [#1344](https://github.com/github/codeql-action/pull/1344) ## 2.1.30 - 02 Nov 2022