[SizzleUnrlsd]

Release 0.24.0: version, changelog and the version mentions of docs/usage.md.

Includes #267 (#262), #268 (#261, with #265), #269 (#263), #274 (#270, #271), #275 (#272), #276 (#264), #277, #280 (#273), #281 (#278) and #282 (#279). The cache format is 19: caches built by an earlier version miss once.

To note before upgrading:

• Module names: a module in a directory without __init__.py inside a package is named after that package (modulegraph: a directory without __init__.py inside a package is named top-level, its relative imports rejected #264). The project symbols of its functions change with it, and a model declared on the former symbol must follow.
• Templates: templates are read as a browser reads them and as each page is put together (templates: _START_TAG backtracks exponentially, a file under templates hangs --check #263, templates: constructs left open, and template tags inside comments, hide cross-site scripting; unclosed ones make the inspection quadratic #272, templates: a block or include inside a parent's script inserts unchecked markup there #273, templates: a comment holding a template tag, closed later inside an attribute, hides an xss #278). Templates established before may no longer be, and xss may be reported where it was not.
• Plugin API: coretrace_python.engine.MAX_PROJECT_ITERATIONS is removed (summaries: the fixpoint never terminates when a call cycle reorders external calls #261). Plugin.rules, Finding.related and coretrace_python.interprocedural.starting_summaries are new.

Commit	Change
docs(changelog): describe the analysis fixes since 0.23.0	#261, #262
docs(changelog): describe how templates are read since 0.23.0	#263, #272, #278
docs(changelog): list the documentation changes since 0.23.0	docs/usage.md, docs/plugins.md
chore: release 0.24.0	the version, the changelog heading, docs/usage.md

tests/test_release.py:33 follows the version (0.23.0 → 0.24.0). No other test changes.

Verification

Python 3.12, on main at f947e68, in a new environment installed as the CI installs it (pip install -e ".[dev]"):

• ruff check . and mypy: clean;
• tests/test_release.py: passes on each commit;
• unit suite: 2,649 passed;
• regression: 19 of 19;
• Enterprise plugins: 978 passed.

The steps of the package job also pass:

• python -m build gives coretrace_python_analyzer-0.24.0, wheel and sdist;
• twine check passes;
• the wheel, installed in a clean environment, reports dangerous-eval, with __version__ 0.24.0.