update change notes

Author: mbaluda

change_notes/2026-08-28-cpp-all-upgrade-result-changes.md

@@ -1,9 +1,9 @@
-- Upgraded CodeQL to v2.23.9, updating `codeql/cpp-all` and related dependencies. 
-- `RULE-1-2` - `LanguageExtensionsShouldNotBeUsed.ql`: fixed a false negative where `_Decimal32`,
-  `_Decimal64` and `_Decimal128` declarations were no longer reported as compiler extensions.
-- `ENV30-C`, `RULE-21-19`, `RULE-25-5-2`: fixed a duplicate alert reported for the same pointer
-  write.
-- `INT31-C` - `IntegerConversionCausesDataLoss.ql`: fixed a false positive on the standard-permitted
-  `(time_t)-1` conversion.
-- `RULE-14-3` - `ControllingExprInvariant.ql`: fixed a false negative where a loop's compound
-  controlling expression that always evaluates to false was incorrectly permitted.
+- `ENV30-C`, `RULE-21-19`, `RULE-25-5-2`: removed duplicate alerts for the same modification of a
+  pointer returned by an environment or locale function.
+- `RULE-14-3`: loop controlling expressions with an invariant false value are now reported when
+  they use the integer literal `0`, including within compound expressions.
+- `ARR30-C`: negative out-of-bounds accesses may now produce a result for each reaching buffer
+  expression.
+- `ARR38-C`, `RULE-21-17`, `RULE-21-18`, `RULE-8-7-1`: corrected the modeling of `strncat` and
+  `wcsncat`. Their destination must be null-terminated, while their source does not need a null
+  terminator within the specified character limit.