Apply suggestions from code review

Author: jketema

java/ql/lib/CHANGELOG.md

@@ -31,7 +31,7 @@
 
   * okhttp3
 * Added more dataflow models for the Play Framework.
-Modified the models related to `java.nio.file.Files.copy` so that generic `[Input|Output]Stream` arguments are not considered file-related sinks.
+* Modified the models related to `java.nio.file.Files.copy` so that generic `[Input|Output]Stream` arguments are not considered file-related sinks.
 * Dataflow analysis has a new flow step through constructors of transitive subtypes of `java.io.InputStream` that wrap an underlying data source. Previously, the step only existed for direct subtypes of `java.io.InputStream`.
 * Path creation sinks modeled in `PathCreation.qll` have been added to the models-as-data sink kind `path-injection`.
 * Updated the regular expression in the `HostnameSanitizer` sanitizer in the `semmle.code.java.security.RequestForgery` library to better detect strings prefixed with a hostname.

java/ql/lib/change-notes/released/0.6.3.md

@@ -31,7 +31,7 @@
 
   * okhttp3
 * Added more dataflow models for the Play Framework.
-Modified the models related to `java.nio.file.Files.copy` so that generic `[Input|Output]Stream` arguments are not considered file-related sinks.
+* Modified the models related to `java.nio.file.Files.copy` so that generic `[Input|Output]Stream` arguments are not considered file-related sinks.
 * Dataflow analysis has a new flow step through constructors of transitive subtypes of `java.io.InputStream` that wrap an underlying data source. Previously, the step only existed for direct subtypes of `java.io.InputStream`.
 * Path creation sinks modeled in `PathCreation.qll` have been added to the models-as-data sink kind `path-injection`.
 * Updated the regular expression in the `HostnameSanitizer` sanitizer in the `semmle.code.java.security.RequestForgery` library to better detect strings prefixed with a hostname.

javascript/ql/lib/CHANGELOG.md

@@ -16,7 +16,7 @@
 * Updated the following JavaScript sink kind names. Any custom data extensions that use these sink kinds will need to be updated accordingly in order to continue working.
   * `command-line-injection` to `command-injection`
   * `credentials[kind]` to `credentials-kind`
-- Added a support of sub modules in `node_modules`.
+* Added a support of sub modules in `node_modules`.
 
 ## 0.6.2
 

javascript/ql/lib/change-notes/released/0.6.3.md

@@ -16,4 +16,4 @@
 * Updated the following JavaScript sink kind names. Any custom data extensions that use these sink kinds will need to be updated accordingly in order to continue working.
   * `command-line-injection` to `command-injection`
   * `credentials[kind]` to `credentials-kind`
-- Added a support of sub modules in `node_modules`.
+* Added a support of sub modules in `node_modules`.